CVE-2022-40514

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; AR8031; AR8035; AR9380; CSR8811; CSRA6620; CSRA6640; CSRB31024; IPQ5010; IPQ5018; IPQ5028; IPQ6000; IPQ6010; IPQ6018; IPQ6028; IPQ8064; IPQ8065; IPQ8068; IPQ8070A; IPQ8071A

References

Timeline

Published
Feb 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-405159.8Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.CVE-2022-405167.8Memory corruption in Core due to stack-based buffer overflow.CVE-2022-405177.8Memory corruption in core due to stack-based buffer overflowCVE-2022-405185.5Information disclosure due to buffer overread in CoreCVE-2022-405195.5Information disclosure due to buffer overread in CoreCVE-2022-40527.2A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of CVE-2022-405207.8Memory corruption due to stack-based buffer overflow in CoreCVE-2022-405217.5Transient DOS due to improper authorization in ModemCVE-2022-405227.8Memory corruption in Linux Networking due to double free while handling a hyp-assign.CVE-2022-405235.5Information disclosure in Kernel due to indirect branch misprediction.CVE-2022-405247.8Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.CVE-2022-405255.5Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.