Memory Corruption Issue in Snapdragon Mobile and Wearables by Qualcomm
CVE-2022-25698

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon Mobile, Snapdragon Wearables
Vendor
CVE Published:
13 December 2022

What is CVE-2022-25698?

The memory corruption vulnerability in Qualcomm's Snapdragon Mobile and Wearables is caused by improper input validation during the reading of address configurations from SPI buses. This flaw could potentially allow an attacker to exploit the system, leading to unauthorized access or system instability. Ensuring proper input validation is critical for maintaining the security integrity of the Snapdragon ecosystem. For detailed mitigation steps, please refer to the official Qualcomm bulletin.

Affected Version(s)

Snapdragon Mobile, Snapdragon Wearables SD 8 Gen1 5G

Snapdragon Mobile, Snapdragon Wearables SD429

Snapdragon Mobile, Snapdragon Wearables SDA429W

References

https://www.qualcomm.com/company/product-security/bulleti...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.