Critical severity · published Oct 19, 2022
CVE-2022-25719
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…
9.1
CVSS
0.6%
EPSS
No
On KEV
Description
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking · Qualcomm, Inc.
APQ8009; APQ8009W; APQ8016; APQ8017; APQ8037; APQ8052; +34 more · source: vendor
AF
Apq8009 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8009w Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8016 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8017 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8037 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8052 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8053 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8056 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8076 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8084 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Ar8031 Firmware · Qualcomm
All versions, or not specified · source: NVD
Affected product
SA
Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Qualcomm, Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-25719
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-25719
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin
More from Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
9.8
CVE-2022-25718
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…