CVE-2022-40514
9.8 criticalEPSS 0.5%
Critical (9.8) in qualcomm. EPSS 0.5% chance of exploitation in the next 30 days.
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:aqt1000_firmware
- qualcomm:ar8031_firmware
- qualcomm:ar8035_firmware
- qualcomm:ar9380_firmware
- qualcomm:csr8811_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:csrb31024_firmware
- qualcomm:ipq5010_firmware
- qualcomm:ipq5018_firmware
- qualcomm:ipq5028_firmware
- qualcomm:ipq6000_firmware
- qualcomm:ipq6010_firmware
- qualcomm:ipq6018_firmware
- qualcomm:ipq6028_firmware
- qualcomm:ipq8064_firmware
- qualcomm:ipq8065_firmware
- qualcomm:ipq8068_firmware
- qualcomm:ipq8070a_firmware
- qualcomm:ipq8071a_firmware
- qualcomm:ipq8072a_firmware
- qualcomm:ipq8074a_firmware
- qualcomm:ipq8076_firmware
- qualcomm:ipq8076a_firmware
- qualcomm:ipq8078_firmware
- qualcomm:ipq8078a_firmware
- qualcomm:ipq8173_firmware
- qualcomm:ipq8174_firmware
- qualcomm:ipq9574_firmware
- qualcomm:qam8295p_firmware
- qualcomm:qca1062_firmware
- qualcomm:qca1064_firmware
- qualcomm:qca2062_firmware
- qualcomm:qca2064_firmware
- qualcomm:qca2065_firmware
- qualcomm:qca2066_firmware
- qualcomm:qca4024_firmware
- qualcomm:qca6310_firmware
- qualcomm:qca6320_firmware
- qualcomm:qca6335_firmware
- qualcomm:qca6390_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6421_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6431_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6554a_firmware
- qualcomm:qca6564a_firmware
References
Check your stackJSON