CVE-2022-25692: qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wearables Reachable Assertion

Vulnerability summary

CVE-2022-25692 is a high (CVSS 7.5) Reachable Assertion vulnerability in qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wearables. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 36.5% of scored vulnerabilities.

Timeline

1. 13-12-2022
   PublishedVulnerability first disclosed.
2. 22-04-2025
   Last modifiedVulnerability information updated.

Description

Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• CWE-617Reachable AssertionThe product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.