CVE-2022-25740 — Classic Buffer Overflow in INC Snapdragon

CWE-120 — Classic Buffer OverflowCWE-787 — Out-of-bounds Write2 documents2 sources
Severity
9.8CRITICALNVD
EPSS
0.3%
top 44.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Qualcomm INC Snapdragon
Timeline
PublishedApr 13

Description

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5qualcomm_inc/snapdragon12 versions+11

🔴Vulnerability Details

1
GHSA
GHSA-r4hx-pgm4-prgq: Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface↗2023-04-13
▶