SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-25702

Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

HIGH 7.5EPSS 0.41%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVSS 3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.41% probability · 34th percentile
CISA KEV
Not listed
Weakness
CWE-617
Affected
qualcomm/apq8009 firmware · qualcomm/apq8017 firmware · qualcomm/apq8037 firmware · qualcomm/aqt1000 firmware · qualcomm/ar8035 firmware · qualcomm/fsm10055 firmware · qualcomm/msm8108 firmware · qualcomm/msm8208 firmware · qualcomm/msm8209 firmware · qualcomm/msm8608 firmware · qualcomm/msm8917 firmware · qualcomm/msm8937 firmware · qualcomm/qca6390 firmware · qualcomm/qca6391 firmware · qualcomm/qca6421 firmware · qualcomm/qca6426 firmware · qualcomm/qca6431 firmware · qualcomm/qca6436 firmware · qualcomm/qca8081 firmware · qualcomm/qca8337 firmware · +40 more
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.