Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-25709

Use of Out-of-range Pointer Offset in Data Modem

High8.4EPSS 0.12%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

Timeline

  1. ID reserved

    By qualcomm

  2. · 13 months later

    Published

  3. · 24 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-25709, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.12% · top 98% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected AR8035
    • affected QCA6174A
    • affected QCA6310
    • affected QCA6320
    • affected QCA6390
    • affected QCA6391
    • affected QCA6421
    • affected QCA6426
    • affected QCA6431
    • affected QCA6436
    • affected QCA8081
    • affected QCA8337
    • affected QCN6024
    • affected QCN9024
    • affected QCX315
    • affected SA515M
    • affected SD 675
    • affected SD 8 Gen1 5G
    • affected SD480
    • affected SD675
    • affected SD678
    • affected SD690 5G
    • affected SD695
    • affected SD720G
    • affected SD730
    • affected SD750G
    • affected SD765
    • affected SD765G
    • affected SD768G
    • affected SD7c
    • affected SD820
    • affected SD821
    • affected SD835
    • affected SD855
    • affected SD865 5G
    • affected SD870
    • affected SDX55
    • affected SDX55M
    • affected SDX65
    • affected SDX70M
    • and 28 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-25709 badge
[![CVE-2022-25709](https://trackcve.app/badge/CVE-2022-25709.svg)](https://trackcve.app/cve/CVE-2022-25709)

Record last updated .