Denial of Service Vulnerability in Qualcomm Snapdragon Products
CVE-2022-25692

7.5HIGH

Key Information:

Vendor
Qualcomm
Status
Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Wearables
Vendor
CVE Published:
13 December 2022

Summary

This vulnerability allows a denial of service condition in Qualcomm's Snapdragon product family, affecting various modules including Auto, Compute, Industrial IoT, Mobile, and Wearables. The issue arises from a reachable assertion when processing the common configuration procedure, which can disrupt system functionality.

Affected Version(s)

Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables AR8035

Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables QCA6390

Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables QCA6391

References

https://www.qualcomm.com/company/product-security/bulleti...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.