CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-40515
Critical (9.8) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
- CWE
- CWE-415
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8009w_firmware
- qualcomm:apq8052_firmware
- qualcomm:apq8056_firmware
- qualcomm:apq8064au_firmware
- qualcomm:apq8076_firmware
- qualcomm:apq8096au_firmware
- qualcomm:aqt1000_firmware
- qualcomm:ar8031_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:mdm9150_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9250_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9628_firmware
- qualcomm:mdm9650_firmware
- qualcomm:msm8108_firmware
- qualcomm:msm8208_firmware
- qualcomm:msm8209_firmware
- qualcomm:msm8608_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8952_firmware
- qualcomm:msm8956_firmware
- qualcomm:msm8976_firmware
- qualcomm:msm8976sg_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6310_firmware
- qualcomm:qca6320_firmware
- qualcomm:qca6335_firmware
- qualcomm:qca6390_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6564_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca9367_firmware
- qualcomm:qca9377_firmware
- qualcomm:qcc5100_firmware
- qualcomm:qcm2290_firmware
- qualcomm:qcm4290_firmware