CVE-2022-25652 Weak cryptography in Snapdragon Wired Infrastructure and Networking

What is CVE-2022-25652?

CVE-2022-25652 is a critical vulnerability in Qualcomm Csr8811 Firmware, published on 16 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Weakness: CWE-287

Which versions are affected by CVE-2022-25652?

It affects 60 products.

Products include Qualcomm Csr8811 Firmware, Qualcomm Ipq5010 Firmware, Qualcomm Ipq5018 Firmware, Qualcomm Ipq5028 Firmware, Qualcomm Ipq6000 Firmware, Qualcomm Ipq6005 Firmware and 54 more.

How do I fix CVE-2022-25652?

No fix has been published for CVE-2022-25652 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-25652 being exploited?

There is no known exploitation of CVE-2022-25652 in the wild and no public exploit code.

Other vulnerabilities in Qualcomm Csr8811 Firmware

• CVE-2024-33066 Improper Input Validation in WLAN Resource Manager Critical 9.8
• CVE-2023-33053 Improper Validation of Array Index in Kernel High 8.4
• CVE-2022-40522 Double free in Linux Networking High 8.4
• CVE-2024-33049 Buffer Over-read in WLAN Host Communication High 7.5
• CVE-2024-33025 Buffer Over-read in WLAN Host High 7.5

All Qualcomm Csr8811 Firmware vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-w3rm-mfwx-5g57.