NetSight
high8.2

CVE-2022-25706

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, …

Impact

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

VendorProductAffected versions
QualcommApq8009w Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8053 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommMsm8917 Firmware
All versions
QualcommMsm8953 Firmware
All versions
QualcommMsm8996au Firmware
All versions
QualcommQca6310 Firmware
All versions
QualcommQca6320 Firmware
All versions
QualcommQca6335 Firmware
All versions

Weakness classification

References