CVE-2022-25749: Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute

Описание

Оригинално описание

Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Засегнати продукти

• Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon W: APQ8009; APQ8017; APQ8064AU; APQ8076; APQ8096AU; AQT1000; AR8031; AR8035; AR9380; CSR8811; CSRA6620; CSRA6640; CSRB31024; IPQ4018; IPQ4028; IPQ4029; IPQ5010; IPQ5018; IPQ5028; IPQ6000; IPQ6010; IPQ6018; IPQ6028; IPQ8064; IPQ8069; IPQ8070; IPQ8070A; IPQ8071; IPQ8071A; IPQ8072; IPQ8072A; IPQ8074; IPQ8074A; IPQ8076; IPQ8076A; IPQ8078; IPQ8078A; IPQ8173; IPQ8174; IPQ9008; MDM8215; MDM9206; MDM9215; MDM9250; MDM9310; MDM9607; MDM9615; MDM9628; MDM9640; MDM9645; MDM9650; MSM8976; MSM8996AU; PMP8074; QAM8295P; QCA0000; QCA1023; QCA1062; QCA1064; QCA2062; QCA2064; QCA2065; QCA2066; QCA4020; QCA4024; QCA4531; QCA6174; QCA6174A; QCA6175A; QCA6310; QCA6320; QCA6335; QCA6390; QCA6391; QCA6420; QCA6421; QCA6426; QCA6428; QCA6430; QCA6431; QCA6436; QCA6438; QCA6554A; QCA6564; QCA6564A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584; QCA6584AU; QCA6595; QCA6595AU; QCA6694; QCA6696; QCA8072; QCA8075; QCA8081; QCA8082; QCA8084; QCA8085; QCA8337; QCA8386; QCA9367; QCA9369; QCA9377; QCA9379; QCA9888; QCA9889; QCA9898; QCA9980; QCA9984; QCA9990; QCA9992; QCA9994; QCC5100; QCM2290; QCM4290; QCM6125; QCM6490; QCN5021; QCN5022; QCN5024; QCN5052; QCN5054; QCN5122; QCN5124; QCN5152; QCN5154; QCN5164; QCN6023; QCN6024; QCN6100; QCN6102; QCN6112; QCN6122; QCN6132; QCN7605; QCN7606; QCN9000; QCN9001; QCN9002; QCN9003; QCN9011; QCN9012; QCN9022; QCN9024; QCN9070; QCN9072; QCN9074; QCN9100; QCN9274; QCS2290; QCS405; QCS410; QCS4290; QCS603; QCS605; QCS610; QCS6125; QCS6490; QCX315; QRB5165; QRB5165M; QRB5165N; QSM8250; QSM8350; SA4150P; SA4155P; SA415M; SA515M; SA6145P; SA6150P; SA6155; SA6155P; SA8145P; SA8150P; SA8155; SA8155P; SA8195P; SA8295P; SC8180X+SDX55; SD 455; SD 636; SD 675; SD 8 Gen1 5G; SD 8CX; SD 8cx Gen2; SD 8cx Gen3; SD460; SD480; SD660; SD662; SD665; SD670; SD675; SD678; SD680; SD690 5G; SD695; SD710; SD712; SD720G; SD730; SD750G; SD765; SD765G; SD768G; SD778G; SD780G; SD7c; SD820; SD835; SD845; SD850; SD855; SD865 5G; SD870; SD888; SD888 5G; SDM630; SDX12; SDX20; SDX20M; SDX24; SDX50M; SDX55; SDX55M; SDX65; SDXR1; SDXR2 5G; SM4125; SM4375; SM6250; SM6250P; SM7250P; SM7315; SM7325P; SW5100; SW5100P; SXR2150P; WCD9326; WCD9330; WCD9335; WCD9340; WCD9341; WCD9360; WCD9370; WCD9371; WCD9375; WCD9380; WCD9385; WCN3610; WCN3615; WCN3660B; WCN3680B; WCN3910; WCN3950; WCN3980; WCN3988; WCN3990; WCN3991; WCN3998; WCN3999; WCN6740; WCN6750; WCN6850; WCN6851; WCN6855; WCN6856; WCN7850; WCN7851; WSA8810; WSA8815; WSA8830; WSA8835

Вид слабост

• CWE-125 Четене извън границите на буфера

История

Други уязвимости в Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon W

• 7.5CVE-2022-33238
• 9.8CVE-2022-25748
• 8.2CVE-2022-22062
• 9.1CVE-2020-11301
• 8.2CVE-2020-11191

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-25749
• https://nvd.nist.gov/vuln/detail/CVE-2022-25749
• https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin