CVE-2022-25674: Qualcomm AR8031 Firmware

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Affected products

• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm MDM9205 Firmware: affected versions not specified
• Qualcomm QCA4004 Firmware: affected versions not specified
• Qualcomm QCA4010 Firmware: affected versions not specified
• Qualcomm QCA4020 Firmware: affected versions not specified
• Qualcomm QCA4024 Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm WCD9306 Firmware: affected versions not specified
• Qualcomm WCD9335 Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WCN3998 Firmware: affected versions not specified
• Qualcomm WCN3999 Firmware: affected versions not specified
• Qualcomm WSA8810 Firmware: affected versions not specified
• Qualcomm WSA8815 Firmware: affected versions not specified

Published 2022-11-15. Last modified 2026-06-17.