8.2
High
CVE-2022-25726 Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
Description
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| 9205_lte_modem_firmware | Versions not published | |
| 9206_lte_modem_firmware | Versions not published | |
| 9207_lte_modem_firmware | Versions not published | |
| fastconnect_6900_firmware | Versions not published | |
| fastconnect_7800_firmware | Versions not published | |
| mdm8207_firmware | Versions not published | |
| qca4004_firmware | Versions not published | |
| qts110_firmware | Versions not published |
Show the 16 other branches Hide the 16 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| snapdragon_1100_wearable_platform_firmware | Versions not published | |
| snapdragon_1200_wearable_platform_firmware | Versions not published | |
| snapdragon_ar2_gen_1_platform_firmware | Versions not published | |
| snapdragon_wear_1300_platform_firmware | Versions not published | |
| snapdragon_x5_lte_modem_firmware | Versions not published | |
| ssg2115p_firmware | Versions not published | |
| ssg2125p_firmware | Versions not published | |
| sxr1230p_firmware | Versions not published | |
| sxr2230p_firmware | Versions not published | |
| wcd9306_firmware | Versions not published | |
| wcd9330_firmware | Versions not published | |
| wcd9380_firmware | Versions not published | |
| wcd9385_firmware | Versions not published | |
| wsa8830_firmware | Versions not published | |
| wsa8832_firmware | Versions not published | |
| wsa8835_firmware | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High