CVE-2022-40531

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-704

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-405327.8Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.CVE-2022-405335.5Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.CVE-2022-405347.8Memory corruption due to improper validation of array index in Audio.CVE-2022-405357.5Transient DOS due to buffer over-read in WLAN while sending a packet to device.CVE-2022-405367.5Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.CVE-2022-405379.8Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.CVE-2022-405387.5Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.CVE-2022-405397.8Memory corruption in Automotive Android OS due to improper validation of array index.CVE-2022-40545.5An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5CVE-2022-405407.8Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.CVE-2022-40557.4When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to tCVE-2022-40575.3The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.
CVE-2022-40531: High severity, CVSS 7.8 | Vulnix