Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-25685

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon…

High7.5EPSS 0.40%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Timeline

  1. ID reserved

    By qualcomm

  2. · 10 months later

    Published

  3. · 2 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-25685, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Modified3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.40% · top 65% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

    • affected APQ8009
    • affected APQ8017
    • affected APQ8037
    • affected AQT1000
    • affected AR8035
    • affected CSRA6620
    • affected CSRA6640
    • affected MSM8108
    • affected MSM8208
    • affected MSM8209
    • affected MSM8608
    • affected MSM8917
    • affected MSM8937
    • affected QCA6174A
    • affected QCA6310
    • affected QCA6320
    • affected QCA6390
    • affected QCA6391
    • affected QCA6421
    • affected QCA6426
    • affected QCA6431
    • affected QCA6436
    • affected QCA6574A
    • affected QCA6574AU
    • affected QCA6595AU
    • affected QCA6696
    • affected QCA8081
    • affected QCA8337
    • affected QCC5100
    • affected QCM2290
    • affected QCM4290
    • affected QCM6125
    • affected QCM6490
    • affected QCN6024
    • affected QCN9024
    • affected QCS2290
    • affected QCS405
    • affected QCS410
    • affected QCS4290
    • affected QCS610
    • and 85 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-25685 badge
[![CVE-2022-25685](https://trackcve.app/badge/CVE-2022-25685.svg)](https://trackcve.app/cve/CVE-2022-25685)

Record last updated .