CVE-2022-25720

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Critical · published October 19, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

🚨 A memory corruption bug lurks in Snapdragons, and it’s a doozy! 😱 One tiny out-of-bounds array access could spell disaster during Wi-Fi connections. Think of it like a delivery driver who tries to drop off a package outside the designated area. When they go off-route, they risk losing the package entirely or causing a mess — just like this vulnerability can lead to unexpected behavior and crashes in critical devices. An attacker could exploit this flaw to crash devices or gain unauthorized control, leading to potential data leaks or even a remote takeover. This isn't just a minor hiccup; it's a major risk for any device utilizing Snapdragon technology, which could disrupt everything from cars to smart appliances!

Put simply

Think of it like a delivery driver who tries to drop off a package outside the designated area. When they go off-route, they risk losing the package entirely or causing a mess — just like this vulnerability can lead to unexpected behavior and crashes in critical devices. This vulnerability arises from a memory corruption issue caused by out-of-bounds access during the connect/roaming process in various Snapdragon platforms like Auto, Compute, and Mobile. Such flaws can allow attackers to manipulate memory and execute arbitrary code.

What to do

An attacker could exploit this flaw to crash devices or gain unauthorized control, leading to potential data leaks or even a remote takeover. This isn't just a minor hiccup; it's a major risk for any device utilizing Snapdragon technology, which could disrupt everything from cars to smart appliances! To protect your devices, check with your manufacturer for updates that address CVE-2022-25720. Apply patches as soon as they are released, and ensure any affected devices are monitored closely for unusual activity. You've got this! 🦸‍♂️ By staying proactive, you can keep your devices safe and secure. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00504 · 42.2th percentile
Published
2022-10-19T00:00Z
EPSS history
Timeline
  • 19 OCT 00:00Z
    Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
    cvelistv5