CVE-2022-25705
High
Published: 10 March 2023
Published
10 March 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0012
30.9th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-25705 is a high-severity Integer Overflow to Buffer Overflow (CWE-680) vulnerability in Qualcomm Apq8009 Firmware. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 30.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-30360
Vulnerability details
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
qualcomm
apq8009 firmware
all versions
qualcomm
apq8009w firmware
all versions
qualcomm
apq8017 firmware
all versions
qualcomm
apq8037 firmware
all versions
qualcomm
apq8052 firmware
all versions
qualcomm
apq8056 firmware
all versions
qualcomm
apq8076 firmware
all versions
qualcomm
apq8096au firmware
all versions
qualcomm
aqt1000 firmware
all versions
qualcomm
ar8035 firmware
all versions
+191 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.