CVE-2022-25709
Use of Out-of-range Pointer Offset in Data Modem
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-02-22 CVE Reserved
- 2023-03-07 CVE Published
- 2025-03-05 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-823: Use of Out-of-range Pointer Offset
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin | 2024-04-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qualcomm Search vendor "Qualcomm" | Ar8035 Firmware Search vendor "Qualcomm" for product "Ar8035 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ar8035 Search vendor "Qualcomm" for product "Ar8035" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6174a Firmware Search vendor "Qualcomm" for product "Qca6174a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6174a Search vendor "Qualcomm" for product "Qca6174a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6310 Firmware Search vendor "Qualcomm" for product "Qca6310 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6310 Search vendor "Qualcomm" for product "Qca6310" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6320 Firmware Search vendor "Qualcomm" for product "Qca6320 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6320 Search vendor "Qualcomm" for product "Qca6320" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6390 Firmware Search vendor "Qualcomm" for product "Qca6390 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6390 Search vendor "Qualcomm" for product "Qca6390" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6391 Firmware Search vendor "Qualcomm" for product "Qca6391 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6391 Search vendor "Qualcomm" for product "Qca6391" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6421 Firmware Search vendor "Qualcomm" for product "Qca6421 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6421 Search vendor "Qualcomm" for product "Qca6421" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6426 Firmware Search vendor "Qualcomm" for product "Qca6426 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6426 Search vendor "Qualcomm" for product "Qca6426" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6431 Firmware Search vendor "Qualcomm" for product "Qca6431 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6431 Search vendor "Qualcomm" for product "Qca6431" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6436 Firmware Search vendor "Qualcomm" for product "Qca6436 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6436 Search vendor "Qualcomm" for product "Qca6436" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8081 Firmware Search vendor "Qualcomm" for product "Qca8081 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8081 Search vendor "Qualcomm" for product "Qca8081" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8337 Firmware Search vendor "Qualcomm" for product "Qca8337 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8337 Search vendor "Qualcomm" for product "Qca8337" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn6024 Firmware Search vendor "Qualcomm" for product "Qcn6024 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn6024 Search vendor "Qualcomm" for product "Qcn6024" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn9024 Firmware Search vendor "Qualcomm" for product "Qcn9024 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn9024 Search vendor "Qualcomm" for product "Qcn9024" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcx315 Firmware Search vendor "Qualcomm" for product "Qcx315 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcx315 Search vendor "Qualcomm" for product "Qcx315" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa515m Firmware Search vendor "Qualcomm" for product "Sa515m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa515m Search vendor "Qualcomm" for product "Sa515m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd 675 Firmware Search vendor "Qualcomm" for product "Sd 675 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd 675 Search vendor "Qualcomm" for product "Sd 675" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd 8 Gen1 5g Firmware Search vendor "Qualcomm" for product "Sd 8 Gen1 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8475 Search vendor "Qualcomm" for product "Sm8475" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd480 Firmware Search vendor "Qualcomm" for product "Sd480 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd480 Search vendor "Qualcomm" for product "Sd480" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd675 Firmware Search vendor "Qualcomm" for product "Sd675 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd675 Search vendor "Qualcomm" for product "Sd675" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd678 Firmware Search vendor "Qualcomm" for product "Sd678 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd678 Search vendor "Qualcomm" for product "Sd678" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd690 5g Firmware Search vendor "Qualcomm" for product "Sd690 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd690 5g Search vendor "Qualcomm" for product "Sd690 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd695 Firmware Search vendor "Qualcomm" for product "Sd695 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd695 Search vendor "Qualcomm" for product "Sd695" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd720g Firmware Search vendor "Qualcomm" for product "Sd720g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd720g Search vendor "Qualcomm" for product "Sd720g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd730 Firmware Search vendor "Qualcomm" for product "Sd730 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd730 Search vendor "Qualcomm" for product "Sd730" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd750g Firmware Search vendor "Qualcomm" for product "Sd750g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd750g Search vendor "Qualcomm" for product "Sd750g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd765 Firmware Search vendor "Qualcomm" for product "Sd765 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd765 Search vendor "Qualcomm" for product "Sd765" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd765g Firmware Search vendor "Qualcomm" for product "Sd765g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd765g Search vendor "Qualcomm" for product "Sd765g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd768g Firmware Search vendor "Qualcomm" for product "Sd768g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd768g Search vendor "Qualcomm" for product "Sd768g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd7c Firmware Search vendor "Qualcomm" for product "Sd7c Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd7c Search vendor "Qualcomm" for product "Sd7c" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd820 Firmware Search vendor "Qualcomm" for product "Sd820 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd820 Search vendor "Qualcomm" for product "Sd820" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd821 Firmware Search vendor "Qualcomm" for product "Sd821 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd821 Search vendor "Qualcomm" for product "Sd821" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd835 Firmware Search vendor "Qualcomm" for product "Sd835 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd835 Search vendor "Qualcomm" for product "Sd835" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd855 Firmware Search vendor "Qualcomm" for product "Sd855 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd855 Search vendor "Qualcomm" for product "Sd855" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd865 5g Firmware Search vendor "Qualcomm" for product "Sd865 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd865 5g Search vendor "Qualcomm" for product "Sd865 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd870 Firmware Search vendor "Qualcomm" for product "Sd870 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd870 Search vendor "Qualcomm" for product "Sd870" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx55 Firmware Search vendor "Qualcomm" for product "Sdx55 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx55 Search vendor "Qualcomm" for product "Sdx55" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx55m Firmware Search vendor "Qualcomm" for product "Sdx55m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx55m Search vendor "Qualcomm" for product "Sdx55m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx65 Firmware Search vendor "Qualcomm" for product "Sdx65 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx65 Search vendor "Qualcomm" for product "Sdx65" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx70m Firmware Search vendor "Qualcomm" for product "Sdx70m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx70m Search vendor "Qualcomm" for product "Sdx70m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdxr2 5g Firmware Search vendor "Qualcomm" for product "Sdxr2 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdxr2 5g Search vendor "Qualcomm" for product "Sdxr2 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm6250 Firmware Search vendor "Qualcomm" for product "Sm6250 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm6250 Search vendor "Qualcomm" for product "Sm6250" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm6250p Firmware Search vendor "Qualcomm" for product "Sm6250p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm6250p Search vendor "Qualcomm" for product "Sm6250p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm7250p Firmware Search vendor "Qualcomm" for product "Sm7250p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm7250p Search vendor "Qualcomm" for product "Sm7250p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 4 Gen 1 Firmware Search vendor "Qualcomm" for product "Snapdragon 4 Gen 1 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 4 Gen 1 Search vendor "Qualcomm" for product "Snapdragon 4 Gen 1" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9335 Firmware Search vendor "Qualcomm" for product "Wcd9335 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9335 Search vendor "Qualcomm" for product "Wcd9335" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9340 Firmware Search vendor "Qualcomm" for product "Wcd9340 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9340 Search vendor "Qualcomm" for product "Wcd9340" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9341 Firmware Search vendor "Qualcomm" for product "Wcd9341 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9341 Search vendor "Qualcomm" for product "Wcd9341" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9370 Firmware Search vendor "Qualcomm" for product "Wcd9370 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9370 Search vendor "Qualcomm" for product "Wcd9370" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9375 Firmware Search vendor "Qualcomm" for product "Wcd9375 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9375 Search vendor "Qualcomm" for product "Wcd9375" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9380 Firmware Search vendor "Qualcomm" for product "Wcd9380 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9380 Search vendor "Qualcomm" for product "Wcd9380" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9385 Firmware Search vendor "Qualcomm" for product "Wcd9385 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9385 Search vendor "Qualcomm" for product "Wcd9385" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3950 Firmware Search vendor "Qualcomm" for product "Wcn3950 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3950 Search vendor "Qualcomm" for product "Wcn3950" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3980 Firmware Search vendor "Qualcomm" for product "Wcn3980 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3980 Search vendor "Qualcomm" for product "Wcn3980" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3988 Firmware Search vendor "Qualcomm" for product "Wcn3988 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3988 Search vendor "Qualcomm" for product "Wcn3988" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3990 Firmware Search vendor "Qualcomm" for product "Wcn3990 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3990 Search vendor "Qualcomm" for product "Wcn3990" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3991 Firmware Search vendor "Qualcomm" for product "Wcn3991 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3991 Search vendor "Qualcomm" for product "Wcn3991" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3998 Firmware Search vendor "Qualcomm" for product "Wcn3998 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3998 Search vendor "Qualcomm" for product "Wcn3998" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn6850 Firmware Search vendor "Qualcomm" for product "Wcn6850 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn6850 Search vendor "Qualcomm" for product "Wcn6850" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn6851 Firmware Search vendor "Qualcomm" for product "Wcn6851 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn6851 Search vendor "Qualcomm" for product "Wcn6851" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn6855 Firmware Search vendor "Qualcomm" for product "Wcn6855 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn6855 Search vendor "Qualcomm" for product "Wcn6855" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn6856 Firmware Search vendor "Qualcomm" for product "Wcn6856 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn6856 Search vendor "Qualcomm" for product "Wcn6856" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn7850 Firmware Search vendor "Qualcomm" for product "Wcn7850 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn7850 Search vendor "Qualcomm" for product "Wcn7850" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn7851 Firmware Search vendor "Qualcomm" for product "Wcn7851 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn7851 Search vendor "Qualcomm" for product "Wcn7851" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8810 Firmware Search vendor "Qualcomm" for product "Wsa8810 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8810 Search vendor "Qualcomm" for product "Wsa8810" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8815 Firmware Search vendor "Qualcomm" for product "Wsa8815 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8815 Search vendor "Qualcomm" for product "Wsa8815" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8830 Firmware Search vendor "Qualcomm" for product "Wsa8830 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8830 Search vendor "Qualcomm" for product "Wsa8830" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8835 Firmware Search vendor "Qualcomm" for product "Wsa8835 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8835 Search vendor "Qualcomm" for product "Wsa8835" | - | - |
Safe
|