CVE-2022-25692

HIGH

Qualcomm AR8035 and Multiple Firmware - Denial of Service via Common Config Procedure

Title source: llm

Description

Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1

Core References

Vendor Advisory

https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

Scores

CVSS v3 7.5

EPSS 0.0045

EPSS Percentile 63.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-617

Status published

Products (50)

qualcomm/ar8035_firmware

qualcomm/qca6390_firmware

qualcomm/qca6391_firmware

qualcomm/qca6574a_firmware

qualcomm/qca6595au_firmware

qualcomm/qca6696_firmware

qualcomm/qca8081_firmware

qualcomm/qca8337_firmware

qualcomm/qcm6490_firmware

qualcomm/qcn6024_firmware

... and 40 more

Published Dec 13, 2022

Tracked Since Feb 18, 2026