CVE-2022-25736 in Android
Summary
by MITRE • 10/19/2022
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 05/08/2026
This vulnerability represents a critical denial of service condition affecting multiple Qualcomm Snapdragon product lines through an out-of-bounds read during processing of VHT action frames in wireless local area network communications. The flaw exists within the wireless networking stack of Qualcomm's automotive and consumer connectivity solutions, specifically in how the system handles Variable Transmission Header (VHT) action frames that are part of the 802.11ac wireless standard. The out-of-bounds read occurs when the wireless subsystem attempts to parse malformed or specially crafted VHT action frames, leading to memory access violations that can cause system crashes or complete service disruption. This vulnerability affects a broad range of devices including automotive systems, mobile devices, industrial IoT equipment, and consumer electronics that rely on Qualcomm's wireless connectivity chips, creating widespread potential impact across multiple industry sectors. The issue stems from insufficient input validation and bounds checking within the wireless frame processing logic, where the system fails to properly verify frame length or structure before attempting to access memory locations beyond the allocated buffer boundaries.
The technical exploitation of this vulnerability requires an attacker to transmit a maliciously crafted VHT action frame to a target device running vulnerable Snapdragon hardware. This attack vector aligns with the ATT&CK technique T1499.001 for network denial of service and can be classified under CWE-129 as "Improper Validation of Array Index." The vulnerability demonstrates a classic buffer over-read condition where the wireless processing code accesses memory locations beyond the intended array bounds without proper validation, potentially allowing for system instability or complete service interruption. The attack can be executed remotely over the wireless medium, making it particularly concerning for automotive applications where wireless connectivity is critical for vehicle operation and safety systems. The affected Snapdragon product families include automotive platforms like Snapdragon Auto, consumer electronics connectivity solutions such as Snapdragon Consumer Electronics Connectivity, and various IoT implementations spanning industrial and wearable devices.
The operational impact of this vulnerability extends beyond simple service disruption to potentially compromise vehicle safety systems, industrial control networks, and consumer device reliability. In automotive contexts, the denial of service could affect wireless connectivity for vehicle diagnostics, infotainment systems, or even critical safety features that rely on wireless communication protocols. The vulnerability affects devices that may be deployed in mission-critical environments where wireless connectivity is essential for proper operation, making this issue particularly dangerous for automotive, industrial, and IoT applications. The widespread nature of affected product lines means that numerous device manufacturers must address this vulnerability across their product portfolios, potentially requiring firmware updates, hardware replacements, or system redesigns to ensure continued operation and safety compliance. Organizations implementing wireless solutions based on affected Snapdragon chipsets must conduct thorough risk assessments and develop mitigation strategies to protect against potential exploitation.
Mitigation strategies for this vulnerability should include immediate firmware updates from device manufacturers to address the buffer over-read condition in wireless frame processing. System administrators should implement network monitoring to detect anomalous VHT action frame traffic patterns that could indicate attempted exploitation. The vulnerability requires defensive programming practices including bounds checking, input validation, and proper memory management to prevent similar issues in future implementations. Organizations should also consider network segmentation and access controls to limit potential attack surfaces and reduce the impact of successful exploitation attempts. The fix should implement proper validation of frame lengths and structures before memory access operations, ensuring that all array indices are within valid bounds. Additionally, continuous security monitoring and threat intelligence sharing within the automotive and IoT industries will be crucial for identifying similar vulnerabilities and maintaining system integrity across the affected product ecosystem.