What is CVE-2022-25663?

CVE-2022-25663 is a medium-severity vulnerability in Qualcomm Aqt1000, classified under Out-of-bounds Read. CVSS score: 5.5/10. Published 2022-10-19.

How severe is CVE-2022-25663?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Out-of-bounds Read in Qualcomm Aqt1000

CVE-2022-25663

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Vulnerability class: Buffer Overflow

EPSS: 0.001 (1.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Qualcomm Aqt1000
Qualcomm Aqt1000_firmware
Qualcomm Qca1062
Qualcomm Qca1062_firmware
Qualcomm Qca1064
Qualcomm Qca1064_firmware
Qualcomm Qca2062
Qualcomm Qca2062_firmware
Qualcomm Qca2064
Qualcomm Qca2064_firmware

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

product-security@qualcomm.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-25663?: CVE-2022-25663 is a medium-severity vulnerability in Qualcomm Aqt1000, classified under Out-of-bounds Read. CVSS score: 5.5/10. Published 2022-10-19.
How severe is CVE-2022-25663?: Medium severity. CVSS v3 base score is 5.5 out of 10.