CVE-2022-40539

Improper Validation of Array Index in Automotive Android OS

State: Published
Severity: 8.4 High
Published: Mar 7, 2023
Updated: Aug 3, 2024
Reserved: Sep 12, 2022

Description

Memory corruption in Automotive Android OS due to improper validation of array index.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	QAM8295PAffected QCA6574AUAffected QCA6696Affected QCC5100Affected QCS410Affected QCS610Affected SA6145PAffected SA6150PAffected SA6155PAffected SA8145PAffected SA8150PAffected SA8155PAffected SA8195PAffected SA8295PAffected SW5100Affected SW5100PAffected WCD9341Affected WCD9370Affected WCN3950Affected WCN3980Affected WCN3988Affected WSA8810Affected WSA8815Affected WSA8830Affected WSA8835Affected

References

https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.