CVE-2022-25663

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-19 · updated 2026-06-17
Weakness: CWE-125

Description

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Affected products

Qualcomm Aqt1000 Firmware: all versions
Qualcomm Qca1062 Firmware: all versions
Qualcomm Qca1064 Firmware: all versions
Qualcomm Qca2062 Firmware: all versions
Qualcomm Qca2064 Firmware: all versions
Qualcomm Qca2065 Firmware: all versions
Qualcomm Qca2066 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6420 Firmware: all versions
Qualcomm Qca6430 Firmware: all versions
Qualcomm Sd778G Firmware: all versions
Qualcomm Sd7C Firmware: all versions
Qualcomm Sd850 Firmware: all versions
Qualcomm Sd 8Cx Gen2 Firmware: all versions
Qualcomm Sd 8Cx Gen3 Firmware: all versions
Qualcomm Sm6250 Firmware: all versions
Qualcomm Wcd9340 Firmware: all versions
Qualcomm Wcd9341 Firmware: all versions
Qualcomm Wcd9380 Firmware: all versions
Qualcomm Wcd9385 Firmware: all versions
Qualcomm Wcn3990 Firmware: all versions
Qualcomm Wcn3991 Firmware: all versions
Qualcomm Wcn3998 Firmware: all versions
Qualcomm Wcn6750 Firmware: all versions
Qualcomm Wcn6855 Firmware: all versions
Qualcomm Wcn6856 Firmware: all versions
Qualcomm Wsa8810 Firmware: all versions
Qualcomm Wsa8815 Firmware: all versions
Qualcomm Wsa8830 Firmware: all versions

References

Get alerted when CVE-2022-25663 or the next vulnerability affects your stack