CVE-2022-25685

HIGH

Qualcomm Multiple Chips - DoS via Modem Error Handling

Title source: llm

Description

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1

Core References

Vendor Advisory

https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

Scores

CVSS v3 7.5

EPSS 0.0038

EPSS Percentile 59.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-287

Status published

Products (50)

qualcomm/apq8009_firmware

qualcomm/apq8017_firmware

qualcomm/apq8037_firmware

qualcomm/aqt1000_firmware

qualcomm/ar8035_firmware

qualcomm/csra6620_firmware

qualcomm/csra6640_firmware

qualcomm/msm8108_firmware

qualcomm/msm8208_firmware

qualcomm/msm8209_firmware

... and 40 more

Published Dec 13, 2022

Tracked Since Feb 18, 2026