CVE-2022-40521

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS due to improper authorization in Modem

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-285CWE-287

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; AQT1000; AR6003; AR8035; C-V2X 9150; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; MDM8207; MDM8215

References

Timeline

Published
Jun 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-405227.8Memory corruption in Linux Networking due to double free while handling a hyp-assign.CVE-2022-405235.5Information disclosure in Kernel due to indirect branch misprediction.CVE-2022-405247.8Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.CVE-2022-405255.5Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.CVE-2022-405277.5Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.CVE-2022-405297.8Memory corruption due to improper access control in kernel while processing a mapping request from root process.CVE-2022-40534.8A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function ofCVE-2022-405307.8Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.CVE-2022-405317.8Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.CVE-2022-405327.8Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.CVE-2022-405335.5Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.CVE-2022-405347.8Memory corruption due to improper validation of array index in Audio.
CVE-2022-40521: High severity, CVSS 7.5 | Vulnix