var-202211-1006
Vulnerability from variot
Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music. APQ8009 firmware, APQ8017 firmware, APQ8096AU For multiple Qualcomm products such as firmware, NULL There is a vulnerability in pointer dereference.Service operation interruption (DoS) It may be in a state. Qualcomm chip is a chip of Qualcomm (Qualcomm). A way of miniaturizing circuits (primarily semiconductor devices, but also passive components, etc.) and often fabricated on the surface of a semiconductor wafer. There are security vulnerabilities in several products of Qualcomm chips. The vulnerability is caused by a null pointer reference when its GATT is disconnected, resulting in a denial of service
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-202211-1006", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "ar8031", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa8295p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9150", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa6145p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qam8295p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa8155p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa415m", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa8145p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd626", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9250", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qcs405", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "apq8096au", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcn3660b", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sdx20", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa515m", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcn3610", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcn3998", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6564au", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca9367", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wsa8810", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca4020", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6175a", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9607", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6574a", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6574au", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "msm8996au", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa8195p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "csrb31024", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9640", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa8155", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcn3680b", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcn3615", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa8150p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6595au", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcd9360", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcn3999", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6595", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "csra6640", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcd9335", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6584", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wsa8815", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6696", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9650", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa6150p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6174a", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "apq8017", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "csra6620", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa6155p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6574", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca9379", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9628", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca9377", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sdx20m", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "apq8009", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9206", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6584au", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa6155", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sdx55", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca6564a", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcd9326", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sa4150p", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "wcn3980", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qca4020", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "msm8996au", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "qca6174a", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "mdm9640", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "csra6640", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "apq8017", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "csrb31024", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "apq8096au", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "mdm9650", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "mdm9628", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "qca6564a", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "qam8295p", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "qca6175a", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "apq8009", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "csra6620", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "mdm9150", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "mdm9607", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "mdm9206", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "ar8031", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null }, { "model": "mdm9250", "scope": null, "trust": 0.8, "vendor": "\u30af\u30a2\u30eb\u30b3\u30e0", "version": null } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "db": "NVD", "id": "CVE-2022-25710" } ] }, "cve": "CVE-2022-25710", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "id": "CVE-2022-25710", "impactScore": 3.6, "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 2.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 7.5, "baseSeverity": "High", "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2022-25710", "impactScore": null, "integrityImpact": "None", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2022-25710", "trust": 1.0, "value": "HIGH" }, { "author": "product-security@qualcomm.com", "id": "CVE-2022-25710", "trust": 1.0, "value": "HIGH" }, { "author": "NVD", "id": "CVE-2022-25710", "trust": 0.8, "value": "High" }, { "author": "CNNVD", "id": "CNNVD-202211-2832", "trust": 0.6, "value": "HIGH" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "db": "CNNVD", "id": "CNNVD-202211-2832" }, { "db": "NVD", "id": "CVE-2022-25710" }, { "db": "NVD", "id": "CVE-2022-25710" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music. APQ8009 firmware, APQ8017 firmware, APQ8096AU For multiple Qualcomm products such as firmware, NULL There is a vulnerability in pointer dereference.Service operation interruption (DoS) It may be in a state. Qualcomm chip is a chip of Qualcomm (Qualcomm). A way of miniaturizing circuits (primarily semiconductor devices, but also passive components, etc.) and often fabricated on the surface of a semiconductor wafer. \nThere are security vulnerabilities in several products of Qualcomm chips. The vulnerability is caused by a null pointer reference when its GATT is disconnected, resulting in a denial of service", "sources": [ { "db": "NVD", "id": "CVE-2022-25710" }, { "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "db": "CNNVD", "id": "CNNVD-202211-2832" } ], "trust": 2.16 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2022-25710", "trust": 3.2 }, { "db": "JVNDB", "id": "JVNDB-2022-021015", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-202211-2832", "trust": 0.6 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "db": "CNNVD", "id": "CNNVD-202211-2832" }, { "db": "NVD", "id": "CVE-2022-25710" } ] }, "id": "VAR-202211-1006", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VARIoT devices database", "id": null } ], "trust": 0.4266432 }, "last_update_date": "2024-08-14T15:26:58.895000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Qualcomm Repair measures for chip code bugs", "trust": 0.6, "url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=214765" } ], "sources": [ { "db": "CNNVD", "id": "CNNVD-202211-2832" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-476", "trust": 1.0 }, { "problemtype": "NULL Pointer dereference (CWE-476) [NVD evaluation ]", "trust": 0.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "db": "NVD", "id": "CVE-2022-25710" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.4, "url": "https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin" }, { "trust": 1.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2022-25710" }, { "trust": 0.6, "url": "https://cxsecurity.com/cveshow/cve-2022-25710/" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "db": "CNNVD", "id": "CNNVD-202211-2832" }, { "db": "NVD", "id": "CVE-2022-25710" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "db": "CNNVD", "id": "CNNVD-202211-2832" }, { "db": "NVD", "id": "CVE-2022-25710" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2023-11-07T00:00:00", "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "date": "2022-11-15T00:00:00", "db": "CNNVD", "id": "CNNVD-202211-2832" }, { "date": "2022-11-15T10:15:14.767000", "db": "NVD", "id": "CVE-2022-25710" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2023-11-07T08:19:00", "db": "JVNDB", "id": "JVNDB-2022-021015" }, { "date": "2022-11-18T00:00:00", "db": "CNNVD", "id": "CNNVD-202211-2832" }, { "date": "2022-11-17T21:49:32.380000", "db": "NVD", "id": "CVE-2022-25710" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-202211-2832" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "in multiple Qualcomm products. \u00a0NULL\u00a0 Pointer dereference vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2022-021015" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "code problem", "sources": [ { "db": "CNNVD", "id": "CNNVD-202211-2832" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.