CVE-2022-25727
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon...
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
- Record
CVE-2022-25727- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1284
- Updated
- 2026-11-02
EUVDEUVD-2022-30382
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
- Record
EUVD-2022-30382- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-mvp8-3j6q-qffq
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon...
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
- Record
GHSA-mvp8-3j6q-qffq- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1284
- Updated
- 2026-11-02
NVD
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
- Record
CVE-2022-25727- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1284
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music
- qualcomm ar8031 firmware
- qualcomm csra6620 firmware
- qualcomm csra6640 firmware
- qualcomm mdm8207 firmware
- qualcomm mdm9205 firmware
- qualcomm mdm9206 firmware
- qualcomm mdm9207 firmware
- qualcomm mdm9607 firmware
- qualcomm qca4004 firmware
- qualcomm qca4010 firmware
- qualcomm qca4020 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-25727 is a critical vulnerability (CVSS 9.8) in Qualcomm, Inc. Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Voice & Music, published November 15, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. No source names a fixed version.