Denial of Service Vulnerability in Qualcomm Snapdragon Products
CVE-2022-25702

7.5HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Wearables
Vendor
CVE Published:
13 December 2022

What is CVE-2022-25702?

This vulnerability presents a denial of service risk in Qualcomm's Snapdragon products due to a reachable assertion triggered while processing reconfiguration messages. This issue affects various devices within the Snapdragon Auto, Compute, Industrial IoT, Mobile, and Wearable categories, potentially leading to significant disruptions in device operations.

Affected Version(s)

Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables APQ8009

Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables APQ8017

Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables APQ8037

References

https://www.qualcomm.com/company/product-security/bulleti...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.