CVE-2022-25656: Qualcomm AR8035 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QCA6574 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCA9377 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8155P Firmware: affected versions not specified
• Qualcomm SA8195P Firmware: affected versions not specified
• Qualcomm SD460 Firmware: affected versions not specified
• Qualcomm SD480 Firmware: affected versions not specified
• Qualcomm SD695 Firmware: affected versions not specified
• Qualcomm SD778G Firmware: affected versions not specified
• Qualcomm SD780G Firmware: affected versions not specified
• Qualcomm SD865 5g Firmware: affected versions not specified
• and 40 more

Published 2022-09-16. Last modified 2026-06-17.