Back
CVE-2022-25682
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon…
High8.4EPSS 0.13%
- Published
- Updated
- Reserved
- Assigned by
- qualcomm
Description
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| qualcommCNA (assigner) | 3.1 | High8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.13% · top 98% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.
Weakness
- Use of Out-of-range Pointer Offset in MODEM
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer (opens in a new tab)All about CWE-119 and its CVEs
Affected products
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- affected APQ8009
- affected APQ8009W
- affected APQ8017
- affected APQ8037
- affected APQ8052
- affected APQ8056
- affected APQ8076
- affected APQ8096AU
- affected AQT1000
- affected AR6003
- affected AR8035
- affected CSRA6620
- affected CSRA6640
- affected CSRB31024
- affected MDM8207
- affected MDM8215
- affected MDM8215M
- affected MDM8615M
- affected MDM9150
- affected MDM9205
- affected MDM9206
- affected MDM9207
- affected MDM9215
- affected MDM9230
- affected MDM9250
- affected MDM9310
- affected MDM9330
- affected MDM9607
- affected MDM9615
- affected MDM9615M
- affected MDM9628
- affected MDM9630
- affected MDM9640
- affected MDM9650
- affected MDM9655
- affected MSM8108
- affected MSM8208
- affected MSM8209
- affected MSM8608
- affected MSM8909W
- and 164 more
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-25682)Record last updated .