CVE-2022-25726: Qualcomm MDM8207 Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

Affected products

• Qualcomm MDM8207 Firmware: affected versions not specified
• Qualcomm MDM9205 Firmware: affected versions not specified
• Qualcomm MDM9206 Firmware: affected versions not specified
• Qualcomm MDM9207 Firmware: affected versions not specified
• Qualcomm QCA4004 Firmware: affected versions not specified
• Qualcomm QTS110 Firmware: affected versions not specified
• Qualcomm Snapdragon AR2 Gen 1 Platform Firmware: affected versions not specified
• Qualcomm Snapdragon Wear 1100 Firmware: affected versions not specified
• Qualcomm Snapdragon Wear 1200 Firmware: affected versions not specified
• Qualcomm Snapdragon Wear 1300 Firmware: affected versions not specified
• Qualcomm Snapdragon x5 Lte Modem Firmware: affected versions not specified
• Qualcomm SSG2115P Firmware: affected versions not specified
• Qualcomm SSG2125P Firmware: affected versions not specified
• Qualcomm SXR1230P Firmware: affected versions not specified
• Qualcomm SXR2230P Firmware: affected versions not specified
• Qualcomm WCD9306 Firmware: affected versions not specified
• Qualcomm WCD9330 Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN685X-1 Firmware: affected versions not specified
• Qualcomm WCN685X-5 Firmware: affected versions not specified
• Qualcomm WCN785X-1 Firmware: affected versions not specified
• Qualcomm WCN785X-5 Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• Qualcomm WSA8832 Firmware: affected versions not specified
• and 1 more

Published 2023-04-13. Last modified 2026-06-17.