CVE-2022-25708: Qualcomm SD888 5g Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile

Affected products

• Qualcomm SD888 5g Firmware: affected versions not specified
• Qualcomm Sd 8 GEN1 5g Firmware: affected versions not specified
• Qualcomm SM7450 Firmware: affected versions not specified
• Qualcomm WCD9370 Firmware: affected versions not specified
• Qualcomm WCD9375 Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN6750 Firmware: affected versions not specified
• Qualcomm WCN6850 Firmware: affected versions not specified
• Qualcomm WCN6851 Firmware: affected versions not specified
• Qualcomm WCN6855 Firmware: affected versions not specified
• Qualcomm WCN6856 Firmware: affected versions not specified
• Qualcomm WCN7850 Firmware: affected versions not specified
• Qualcomm WCN7851 Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• Qualcomm WSA8832 Firmware: affected versions not specified
• Qualcomm WSA8835 Firmware: affected versions not specified

Published 2022-09-16. Last modified 2026-06-17.