CVE-2022-25718: Qualcomm, Inc. Snapdragon Auto, Snapdragon

Описание

Оригинално описание

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Засегнати продукти

• Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure : APQ8009; APQ8009W; APQ8016; APQ8017; APQ8037; APQ8052; APQ8053; APQ8056; APQ8064AU; APQ8076; APQ8092; APQ8094; APQ8096AU; AR8031; CSRA6620; CSRA6640; CSRB31024; MDM8215; MDM9205; MDM9206; MDM9215; MDM9250; MDM9310; MDM9607; MDM9615; MDM9628; MDM9640; MDM9645; MDM9650; MSM8108; MSM8208; MSM8209; MSM8608; MSM8909W; MSM8917; MSM8920; MSM8937; MSM8940; MSM8952; MSM8953; MSM8956; MSM8976; MSM8976SG; MSM8992; MSM8994; MSM8996AU; PM8937; QCA0000; QCA1023; QCA1990; QCA4004; QCA4010; QCA4020; QCA4024; QCA6174; QCA6174A; QCA6175A; QCA6310; QCA6320; QCA6554A; QCA6564; QCA6564A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584; QCA6584AU; QCA6595; QCA6595AU; QCA6696; QCA9367; QCA9369; QCA9377; QCA9379; QCC5100; QCS405; QET4101; QSW8573; Qualcomm215; SA415M; SA515M; SA6145P; SA6150P; SA6155; SA6155P; SA8145P; SA8150P; SA8155; SA8155P; SA8195P; SD 455; SD 636; SD205; SD210; SD429; SD439; SD450; SD460; SD632; SD660; SD820; SD821; SD835; SD845; SDA429W; SDM429W; SDM630; SDW2500; SDX12; SDX20; SDX20M; SDX24; SDX55; SW5100; SW5100P; WCD9306; WCD9326; WCD9330; WCD9335; WCD9340; WCD9341; WCD9360; WCD9370; WCD9375; WCN3610; WCN3615; WCN3620; WCN3660; WCN3660B; WCN3680; WCN3680B; WCN3950; WCN3980; WCN3988; WCN3990; WCN3998; WCN3999; WSA8810; WSA8815; WSA8830; WSA8835

Вид слабост

• CWE-252 Непроверена върната стойност

История

Други уязвимости в Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure

• 8.2CVE-2022-25719

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-25718
• https://nvd.nist.gov/vuln/detail/CVE-2022-25718
• https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin