CVE-2022-25685 — Improper Authentication in Google Android

CWE-287 — Improper AuthenticationCWE-863 — Incorrect Authorization3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.3%
top 46.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedDec 13

Description

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-vf24-whv8-r4jj: Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,↗2022-12-13
▶

📋Vendor Advisories

1
Android
CVE-2022-25685: Closed-source component↗2022-12-01
▶