CVE-2022-40535
Buffer Over-read in WLAN
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-09-12 CVE Reserved
- 2023-03-07 CVE Published
- 2024-08-03 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-125: Out-of-bounds Read
- CWE-126: Buffer Over-read
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin | 2024-04-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qualcomm Search vendor "Qualcomm" | Csr8811 Firmware Search vendor "Qualcomm" for product "Csr8811 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Csr8811 Search vendor "Qualcomm" for product "Csr8811" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8070a Firmware Search vendor "Qualcomm" for product "Ipq8070a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8070a Search vendor "Qualcomm" for product "Ipq8070a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8071a Firmware Search vendor "Qualcomm" for product "Ipq8071a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8071a Search vendor "Qualcomm" for product "Ipq8071a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8072a Firmware Search vendor "Qualcomm" for product "Ipq8072a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8072a Search vendor "Qualcomm" for product "Ipq8072a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8074a Firmware Search vendor "Qualcomm" for product "Ipq8074a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8074a Search vendor "Qualcomm" for product "Ipq8074a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8076 Firmware Search vendor "Qualcomm" for product "Ipq8076 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8076 Search vendor "Qualcomm" for product "Ipq8076" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8076a Firmware Search vendor "Qualcomm" for product "Ipq8076a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8076a Search vendor "Qualcomm" for product "Ipq8076a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8078 Firmware Search vendor "Qualcomm" for product "Ipq8078 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8078 Search vendor "Qualcomm" for product "Ipq8078" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8078a Firmware Search vendor "Qualcomm" for product "Ipq8078a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8078a Search vendor "Qualcomm" for product "Ipq8078a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8173 Firmware Search vendor "Qualcomm" for product "Ipq8173 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8173 Search vendor "Qualcomm" for product "Ipq8173" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8174 Firmware Search vendor "Qualcomm" for product "Ipq8174 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8174 Search vendor "Qualcomm" for product "Ipq8174" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq9008 Firmware Search vendor "Qualcomm" for product "Ipq9008 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq9008 Search vendor "Qualcomm" for product "Ipq9008" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq9574 Firmware Search vendor "Qualcomm" for product "Ipq9574 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq9574 Search vendor "Qualcomm" for product "Ipq9574" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca4024 Firmware Search vendor "Qualcomm" for product "Qca4024 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca4024 Search vendor "Qualcomm" for product "Qca4024" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6390 Firmware Search vendor "Qualcomm" for product "Qca6390 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6390 Search vendor "Qualcomm" for product "Qca6390" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6391 Firmware Search vendor "Qualcomm" for product "Qca6391 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6391 Search vendor "Qualcomm" for product "Qca6391" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6421 Firmware Search vendor "Qualcomm" for product "Qca6421 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6421 Search vendor "Qualcomm" for product "Qca6421" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6426 Firmware Search vendor "Qualcomm" for product "Qca6426 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6426 Search vendor "Qualcomm" for product "Qca6426" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6431 Firmware Search vendor "Qualcomm" for product "Qca6431 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6431 Search vendor "Qualcomm" for product "Qca6431" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6436 Firmware Search vendor "Qualcomm" for product "Qca6436 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6436 Search vendor "Qualcomm" for product "Qca6436" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8081 Firmware Search vendor "Qualcomm" for product "Qca8081 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8081 Search vendor "Qualcomm" for product "Qca8081" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8082 Firmware Search vendor "Qualcomm" for product "Qca8082 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8082 Search vendor "Qualcomm" for product "Qca8082" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8084 Firmware Search vendor "Qualcomm" for product "Qca8084 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8084 Search vendor "Qualcomm" for product "Qca8084" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8085 Firmware Search vendor "Qualcomm" for product "Qca8085 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8085 Search vendor "Qualcomm" for product "Qca8085" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8386 Firmware Search vendor "Qualcomm" for product "Qca8386 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8386 Search vendor "Qualcomm" for product "Qca8386" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca9888 Firmware Search vendor "Qualcomm" for product "Qca9888 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca9888 Search vendor "Qualcomm" for product "Qca9888" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca9889 Firmware Search vendor "Qualcomm" for product "Qca9889 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca9889 Search vendor "Qualcomm" for product "Qca9889" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn5024 Firmware Search vendor "Qualcomm" for product "Qcn5024 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn5024 Search vendor "Qualcomm" for product "Qcn5024" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn5124 Firmware Search vendor "Qualcomm" for product "Qcn5124 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn5124 Search vendor "Qualcomm" for product "Qcn5124" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn5154 Firmware Search vendor "Qualcomm" for product "Qcn5154 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn5154 Search vendor "Qualcomm" for product "Qcn5154" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn5164 Firmware Search vendor "Qualcomm" for product "Qcn5164 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn5164 Search vendor "Qualcomm" for product "Qcn5164" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn6023 Firmware Search vendor "Qualcomm" for product "Qcn6023 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn6023 Search vendor "Qualcomm" for product "Qcn6023" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn6024 Firmware Search vendor "Qualcomm" for product "Qcn6024 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn6024 Search vendor "Qualcomm" for product "Qcn6024" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn9000 Firmware Search vendor "Qualcomm" for product "Qcn9000 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn9000 Search vendor "Qualcomm" for product "Qcn9000" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn9024 Firmware Search vendor "Qualcomm" for product "Qcn9024 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn9024 Search vendor "Qualcomm" for product "Qcn9024" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn9070 Firmware Search vendor "Qualcomm" for product "Qcn9070 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn9070 Search vendor "Qualcomm" for product "Qcn9070" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn9072 Firmware Search vendor "Qualcomm" for product "Qcn9072 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn9072 Search vendor "Qualcomm" for product "Qcn9072" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn9074 Firmware Search vendor "Qualcomm" for product "Qcn9074 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn9074 Search vendor "Qualcomm" for product "Qcn9074" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn9274 Firmware Search vendor "Qualcomm" for product "Qcn9274 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn9274 Search vendor "Qualcomm" for product "Qcn9274" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd460 Firmware Search vendor "Qualcomm" for product "Sd460 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd460 Search vendor "Qualcomm" for product "Sd460" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd480 Firmware Search vendor "Qualcomm" for product "Sd480 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd480 Search vendor "Qualcomm" for product "Sd480" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd662 Firmware Search vendor "Qualcomm" for product "Sd662 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd662 Search vendor "Qualcomm" for product "Sd662" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd680 Firmware Search vendor "Qualcomm" for product "Sd680 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd680 Search vendor "Qualcomm" for product "Sd680" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd695 Firmware Search vendor "Qualcomm" for product "Sd695 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd695 Search vendor "Qualcomm" for product "Sd695" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd865 5g Firmware Search vendor "Qualcomm" for product "Sd865 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd865 5g Search vendor "Qualcomm" for product "Sd865 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd870 Firmware Search vendor "Qualcomm" for product "Sd870 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd870 Search vendor "Qualcomm" for product "Sd870" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx55m Firmware Search vendor "Qualcomm" for product "Sdx55m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx55m Search vendor "Qualcomm" for product "Sdx55m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx65 Firmware Search vendor "Qualcomm" for product "Sdx65 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx65 Search vendor "Qualcomm" for product "Sdx65" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx65m Firmware Search vendor "Qualcomm" for product "Sdx65m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx65m Search vendor "Qualcomm" for product "Sdx65m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm4125 Firmware Search vendor "Qualcomm" for product "Sm4125 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm4125 Search vendor "Qualcomm" for product "Sm4125" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 4 Gen 1 Firmware Search vendor "Qualcomm" for product "Snapdragon 4 Gen 1 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 4 Gen 1 Search vendor "Qualcomm" for product "Snapdragon 4 Gen 1" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sw5100 Firmware Search vendor "Qualcomm" for product "Sw5100 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sw5100 Search vendor "Qualcomm" for product "Sw5100" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sw5100p Firmware Search vendor "Qualcomm" for product "Sw5100p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sw5100p Search vendor "Qualcomm" for product "Sw5100p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9326 Firmware Search vendor "Qualcomm" for product "Wcd9326 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9326 Search vendor "Qualcomm" for product "Wcd9326" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9335 Firmware Search vendor "Qualcomm" for product "Wcd9335 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9335 Search vendor "Qualcomm" for product "Wcd9335" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9370 Firmware Search vendor "Qualcomm" for product "Wcd9370 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9370 Search vendor "Qualcomm" for product "Wcd9370" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9375 Firmware Search vendor "Qualcomm" for product "Wcd9375 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9375 Search vendor "Qualcomm" for product "Wcd9375" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9380 Firmware Search vendor "Qualcomm" for product "Wcd9380 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9380 Search vendor "Qualcomm" for product "Wcd9380" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9385 Firmware Search vendor "Qualcomm" for product "Wcd9385 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9385 Search vendor "Qualcomm" for product "Wcd9385" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3910 Firmware Search vendor "Qualcomm" for product "Wcn3910 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3910 Search vendor "Qualcomm" for product "Wcn3910" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3950 Firmware Search vendor "Qualcomm" for product "Wcn3950 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3950 Search vendor "Qualcomm" for product "Wcn3950" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3980 Firmware Search vendor "Qualcomm" for product "Wcn3980 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3980 Search vendor "Qualcomm" for product "Wcn3980" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3988 Firmware Search vendor "Qualcomm" for product "Wcn3988 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3988 Search vendor "Qualcomm" for product "Wcn3988" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3991 Firmware Search vendor "Qualcomm" for product "Wcn3991 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3991 Search vendor "Qualcomm" for product "Wcn3991" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3998 Firmware Search vendor "Qualcomm" for product "Wcn3998 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3998 Search vendor "Qualcomm" for product "Wcn3998" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn6850 Firmware Search vendor "Qualcomm" for product "Wcn6850 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn6850 Search vendor "Qualcomm" for product "Wcn6850" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn6851 Firmware Search vendor "Qualcomm" for product "Wcn6851 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn6851 Search vendor "Qualcomm" for product "Wcn6851" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8810 Firmware Search vendor "Qualcomm" for product "Wsa8810 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8810 Search vendor "Qualcomm" for product "Wsa8810" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8815 Firmware Search vendor "Qualcomm" for product "Wsa8815 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8815 Search vendor "Qualcomm" for product "Wsa8815" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8830 Firmware Search vendor "Qualcomm" for product "Wsa8830 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8830 Search vendor "Qualcomm" for product "Wsa8830" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8835 Firmware Search vendor "Qualcomm" for product "Wsa8835 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8835 Search vendor "Qualcomm" for product "Wsa8835" | - | - |
Safe
|