CVE-2022-40517

Stack based buffer overflow in Core

State: Published
Severity: 8.4 High
Published: Jan 6, 2023
Updated: Apr 9, 2025
Reserved: Sep 12, 2022

Description

Memory corruption in core due to stack-based buffer overflow

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AQT1000Affected AR8031Affected AR8035Affected CSR8811Affected CSRA6620Affected CSRA6640Affected CSRB31024Affected FSM10056Affected IPQ6000Affected IPQ6005Affected IPQ6010Affected IPQ6018Affected IPQ6028Affected IPQ9008Affected IPQ9574Affected MDM9150Affected MDM9205Affected QAM8295PAffected QCA4004Affected QCA4024Affected QCA6174AAffected QCA6310Affected QCA6320Affected QCA6335Affected QCA6390Affected and 156 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AQT1000Affected
AR8031Affected
AR8035Affected
CSR8811Affected
CSRA6620Affected
CSRA6640Affected
CSRB31024Affected
FSM10056Affected
IPQ6000Affected
IPQ6005Affected
IPQ6010Affected
IPQ6018Affected
IPQ6028Affected
IPQ9008Affected
IPQ9574Affected
MDM9150Affected
MDM9205Affected
QAM8295PAffected
QCA4004Affected
QCA4024Affected
QCA6174AAffected
QCA6310Affected
QCA6320Affected
QCA6335Affected
QCA6390Affected
and 156 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.