CVE-2022-40532 — HIGH (8.4)

Vulnerability Description

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Qualcomm	315 5G Iot Modem Firmware	-
Qualcomm	315 5G Iot Modem	-
Qualcomm	9205 Lte Modem Firmware	-
Qualcomm	9205 Lte Modem	-
Qualcomm	Apq8016 Firmware	-
Qualcomm	Apq8016	-
Qualcomm	Apq8017 Firmware	-
Qualcomm	Apq8017	-
Qualcomm	Apq8037 Firmware	-
Qualcomm	Apq8037	-
Qualcomm	Apq8064Au Firmware	-
Qualcomm	Apq8064Au	-
Qualcomm	Apq8076 Firmware	-
Qualcomm	Apq8076	-
Qualcomm	Apq8092 Firmware	-
Qualcomm	Apq8092	-
Qualcomm	Apq8094 Firmware	-
Qualcomm	Apq8094	-
Qualcomm	Aqt1000 Firmware	-
Qualcomm	Aqt1000	-

Related Weaknesses (CWE)

CWE-190

References

https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletinVendor Advisory

FAQ

What is CVE-2022-40532?

CVE-2022-40532 is a vulnerability with a CVSS score of 8.4 (HIGH). Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

How severe is CVE-2022-40532?

CVE-2022-40532 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-40532?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm 315 5G Iot Modem Firmware, Qualcomm 315 5G Iot Modem, Qualcomm 9205 Lte Modem Firmware, Qualcomm 9205 Lte Modem, Qualcomm Apq8016 Firmware.