CVE-2022-25718

CRITICAL

Snapdragon - Cryptographic Issue

Title source: llm
STIX 2.1

Description

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Scores

CVSS v3 9.1
EPSS 0.0023
EPSS Percentile 45.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-252
Status published
Products (50)
qualcomm/apq8009_firmware
qualcomm/apq8009w_firmware
qualcomm/apq8016_firmware
qualcomm/apq8017_firmware
qualcomm/apq8037_firmware
qualcomm/apq8052_firmware
qualcomm/apq8053_firmware
qualcomm/apq8056_firmware
qualcomm/apq8064au_firmware
qualcomm/apq8076_firmware
... and 40 more
Published Oct 19, 2022
Tracked Since Feb 18, 2026