by Kastro
Paper/Archive/CVE-2022-40514

CVE-2022-40514

Qualcomm, Inc. Snapdragon — Buffer copy without checking size of input in WLAN Firmware

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 41.1.411 × 208.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Affected

ProductAffectedFixed inSource
SnapdragonAQT1000–CNA
SnapdragonAR8031–CNA
SnapdragonAR8035–CNA
SnapdragonAR9380–CNA
SnapdragonCSR8811–CNA
SnapdragonCSRA6620–CNA
SnapdragonCSRA6640–CNA
SnapdragonCSRB31024–CNA
SnapdragonIPQ5010–CNA
SnapdragonIPQ5018–CNA
SnapdragonIPQ5028–CNA
SnapdragonIPQ6000–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qualcomm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refqualcomm.com/company/product-security/bulletins/february-2023-bulletin