CVE-2022-40504

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; APQ8017; AQT1000; AR8035; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; FSM10055; QCA6174A; QCA6310; QCA6335; QCA6391; QCA6420; QCA6421; QCA6426

References

Timeline

Published
May 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-405057.5Information disclosure due to buffer over-read in Modem while parsing DNS hostname.CVE-2022-405077.8Memory corruption due to double free in Core while mapping HLOS address to the list.CVE-2022-405087.5Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.CVE-2022-40519.8A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file vCVE-2022-405109.8Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.CVE-2022-405127.5Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.CVE-2022-405137.5Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.CVE-2022-405149.8Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.CVE-2022-405159.8Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.CVE-2022-405167.8Memory corruption in Core due to stack-based buffer overflow.CVE-2022-405177.8Memory corruption in core due to stack-based buffer overflowCVE-2022-405185.5Information disclosure due to buffer overread in Core
CVE-2022-40504: High severity, CVSS 7.5 | Vulnix