CVE-2022-40537

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	APQ8009; APQ8009W; APQ8017; APQ8064AU; APQ8096AU; AQT1000; AR8031; CSRA6620; CSRA6640; MDM9150; MDM9250; MDM9607; MDM9628; MDM9650; MSM8108; MSM8208; MSM8209; MSM8608; MSM8909W; MSM8917

References

https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletinPatch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletinPatch, Vendor Advisory

Timeline

Published: Mar 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-405387.5Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.CVE-2022-405397.8Memory corruption in Automotive Android OS due to improper validation of array index.CVE-2022-40545.5An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5 CVE-2022-405407.8Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.CVE-2022-40557.4When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to t CVE-2022-40575.3The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.CVE-2022-40585.4The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS c CVE-2022-40599.8The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement v CVE-2022-40609.8The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any CVE-2022-406029.8A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an impr CVE-2022-406036.1A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series fir CVE-2022-406047.5In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.