SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-25663

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

MEDIUM 5.5EPSS 0.11%

Does this matter?

Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.

Description

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.11% probability · 2th percentile
CISA KEV
Not listed
Weakness
CWE-125
Affected
qualcomm/aqt1000 firmware · qualcomm/qca1062 firmware · qualcomm/qca1064 firmware · qualcomm/qca2062 firmware · qualcomm/qca2064 firmware · qualcomm/qca2065 firmware · qualcomm/qca2066 firmware · qualcomm/qca6390 firmware · qualcomm/qca6391 firmware · qualcomm/qca6420 firmware · qualcomm/qca6430 firmware · qualcomm/sd 8cx gen2 firmware · qualcomm/sd 8cx gen3 firmware · qualcomm/sd778g firmware · qualcomm/sd7c firmware · qualcomm/sd850 firmware · qualcomm/sm6250 firmware · qualcomm/wcd9340 firmware · qualcomm/wcd9341 firmware · qualcomm/wcd9380 firmware · +11 more
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.