VulnerabilityModified
CVE-2022-25654
Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
MEDIUM 6.7EPSS 0.12%
Does this matter?
Lower severity and a low EPSS score (0.12%). Track it; it rarely justifies an emergency change on its own.
Description
Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.12% probability · 2th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- qualcomm/apq8096au firmware · qualcomm/mdm9650 firmware · qualcomm/qca6174a firmware · qualcomm/qca6574au firmware · qualcomm/qcs603 firmware · qualcomm/qcs605 firmware · qualcomm/qualcomm215 firmware · qualcomm/sd429 firmware · qualcomm/sd820 firmware · qualcomm/sdm429w firmware · qualcomm/wcd9326 firmware · qualcomm/wcd9335 firmware · qualcomm/wcd9341 firmware · qualcomm/wcn3615 firmware · qualcomm/wcn3620 firmware · qualcomm/wcn3660b firmware · qualcomm/wcn3680 firmware · qualcomm/wcn3980 firmware · qualcomm/wcn3990 firmware · qualcomm/wsa8810 firmware · +1 more
- Source
- product-security@qualcomm.com
References
- https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletinPatch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletinPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.