VULNERABILITY INTELLIGENCE
CVE-2022-25718
CVSS score9.1 CRITICAL
EPSS probability0.49%
CISA KEVNot currently listed
Published2022-10-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Weakness classification
- nvd@nist.gov: CWE-252
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-252
Primary references
- product-security@qualcomm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory