VDB
CVE-2022-25739
CVE-2022-25739
PUBLISHED
CVSS 7.5 HIGH
Null Point Dereference in MODEM
Reported by qualcomm · Published April 4, 2023
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm, Inc. | Snapdragon | 9205 LTE Modem, 9206 LTE Modem, 9207 LTE Modem |
| qualcomm | snapdragon_1200_wearable_platform_firmware | * |
| qualcomm | qts110_firmware | * |
| qualcomm | wsa8830_firmware | * |
| qualcomm | wcd9330_firmware | * |
| qualcomm | wsa8835_firmware | * |
| qualcomm | wcd9385_firmware | * |
| qualcomm | fastconnect_6900_firmware | * |
| qualcomm | wsa8832_firmware | * |
| qualcomm | snapdragon_wear_1300_platform_firmware | * |
| qualcomm | snapdragon_x5_lte_modem_firmware | * |
| qualcomm | wcd9380_firmware | * |
| qualcomm | mdm8207_firmware | * |
| qualcomm | sxr2230p_firmware | * |
| qualcomm | 9207_lte_modem_firmware | * |
| qualcomm | sxr1230p_firmware | * |
| Qualcomm, Inc. | Snapdragon | * |
| qualcomm | 9206_lte_modem_firmware | * |
| qualcomm | snapdragon_1100_wearable_platform_firmware | * |
| qualcomm | qca4004_firmware | * |
…and 6 more
Timeline
- Apr 4, 2023 EPSS Score (30 in total, the first dated here)
- Apr 4, 2023 CVE Published
- Nov 21, 2024 CVE Updated
- Jan 20, 2026 PoC Published
- Apr 30, 2026 Security Advisory
- Jul 1, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2022-25739
vulnetix vdb fixes CVE-2022-25739Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-25739/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart