Lucene search

QualcommCVE-2022-40522

HistoryJun 06, 2023 - 8:15 a.m.

CVE-2022-40522

2023-06-0608:15:11

CWE-415

qualcomm

web.nvd.nist.gov

cve-2022-40522

memory corruption

linux networking

double free

hyp-assign

nvd

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Memory corruption in Linux Networking due to double free while handling a hyp-assign.

Affected configurations

Nvd

Node

qualcommcsr8811_firmwareMatch-

AND

qualcommcsr8811Match-

Node

qualcommwcn3991_firmwareMatch-

AND

qualcommwcn3991Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommipq6000_firmwareMatch-

AND

qualcommipq6000Match-

Node

qualcommipq6005_firmwareMatch-

AND

qualcommipq6005Match-

Node

qualcommipq6010_firmwareMatch-

AND

qualcommipq6010Match-

Node

qualcommipq6018_firmwareMatch-

AND

qualcommipq6018Match-

Node

qualcommipq6028_firmwareMatch-

AND

qualcommipq6028Match-

Node

qualcommipq9008_firmwareMatch-

AND

qualcommipq9008Match-

Node

qualcommipq9574_firmwareMatch-

AND

qualcommipq9574Match-

Node

qualcommqca4024_firmwareMatch-

AND

qualcommqca4024Match-

Node

qualcommqca6574a_firmwareMatch-

AND

qualcommqca6574aMatch-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqca6696_firmwareMatch-

AND

qualcommqca6696Match-

Node

qualcommqca8072_firmwareMatch-

AND

qualcommqca8072Match-

Node

qualcommqca8075_firmwareMatch-

AND

qualcommqca8075Match-

Node

qualcommqca8081_firmwareMatch-

AND

qualcommqca8081Match-

Node

qualcommqca8082_firmwareMatch-

AND

qualcommqca8082Match-

Node

qualcommqca8084_firmwareMatch-

AND

qualcommqca8084Match-

Node

qualcommqca8085_firmwareMatch-

AND

qualcommqca8085Match-

Node

qualcommqca8386_firmwareMatch-

AND

qualcommqca8386Match-

Node

qualcommqcn5021_firmwareMatch-

AND

qualcommqcn5021Match-

Node

qualcommqcn5022_firmwareMatch-

AND

qualcommqcn5022Match-

Node

qualcommqcn5052_firmwareMatch-

AND

qualcommqcn5052Match-

Node

qualcommqcn5121_firmwareMatch-

AND

qualcommqcn5121Match-

Node

qualcommqcn5122_firmwareMatch-

AND

qualcommqcn5122Match-

Node

qualcommqcn5152_firmwareMatch-

AND

qualcommqcn5152Match-

Node

qualcommqcn6023_firmwareMatch-

AND

qualcommqcn6023Match-

Node

qualcommqcn6024_firmwareMatch-

AND

qualcommqcn6024Match-

Node

qualcommqcn9000_firmwareMatch-

AND

qualcommqcn9000Match-

Node

qualcommqcn9022_firmwareMatch-

AND

qualcommqcn9022Match-

Node

qualcommqcn9024_firmwareMatch-

AND

qualcommqcn9024Match-

Node

qualcommqcn9070_firmwareMatch-

AND

qualcommqcn9070Match-

Node

qualcommqcn9072_firmwareMatch-

AND

qualcommqcn9072Match-

Node

qualcommqcn9074_firmwareMatch-

AND

qualcommqcn9074Match-

Node

qualcommqcn9274_firmwareMatch-

AND

qualcommqcn9274Match-

Node

qualcommsa6145p_firmwareMatch-

AND

qualcommsa6145pMatch-

Node

qualcommsa6150p_firmwareMatch-

AND

qualcommsa6150pMatch-

Node

qualcommsa6155_firmwareMatch-

AND

qualcommsa6155Match-

Node

qualcommsa6155p_firmwareMatch-

AND

qualcommsa6155pMatch-

Node

qualcommsa8145p_firmwareMatch-

AND

qualcommsa8145pMatch-

Node

qualcommsa8150p_firmwareMatch-

AND

qualcommsa8150pMatch-

Node

qualcommsa8155_firmwareMatch-

AND

qualcommsa8155Match-

Node

qualcommsa8155p_firmwareMatch-

AND

qualcommsa8155pMatch-

Node

qualcommsa8195p_firmwareMatch-

AND

qualcommsa8195pMatch-

Node

qualcommsm7250p_firmwareMatch-

AND

qualcommsm7250pMatch-

Node

qualcommsm7250-aa_firmwareMatch-

AND

qualcommsm7250-aaMatch-

Node

qualcommsm7250-ab_firmwareMatch-

AND

qualcommsm7250-abMatch-

Node

qualcommsm7250-ac_firmwareMatch-

AND

qualcommsm7250-acMatch-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

VendorProductVersionCPE
qualcommcsr8811_firmware-cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*
qualcommcsr8811-cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*
qualcommwcn3991_firmware-cpe:2.3:o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
qualcommwcn3991-cpe:2.3:h:qualcomm:wcn3991:-:*:*:*:*:*:*:*
qualcommwcn3998_firmware-cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
qualcommwcn3998-cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*
qualcommipq6000_firmware-cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:*
qualcommipq6000-cpe:2.3:h:qualcomm:ipq6000:-:*:*:*:*:*:*:*
qualcommipq6005_firmware-cpe:2.3:o:qualcomm:ipq6005_firmware:-:*:*:*:*:*:*:*
qualcommipq6005-cpe:2.3:h:qualcomm:ipq6005:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	csr8811_firmware	-	cpe:2.3:o:qualcomm:csr8811_firmware:-:::::::*
qualcomm	csr8811	-	cpe:2.3:h:qualcomm:csr8811:-:::::::*
qualcomm	wcn3991_firmware	-	cpe:2.3:o:qualcomm:wcn3991_firmware:-:::::::*
qualcomm	wcn3991	-	cpe:2.3:h:qualcomm:wcn3991:-:::::::*
qualcomm	wcn3998_firmware	-	cpe:2.3:o:qualcomm:wcn3998_firmware:-:::::::*
qualcomm	wcn3998	-	cpe:2.3:h:qualcomm:wcn3998:-:::::::*
qualcomm	ipq6000_firmware	-	cpe:2.3:o:qualcomm:ipq6000_firmware:-:::::::*
qualcomm	ipq6000	-	cpe:2.3:h:qualcomm:ipq6000:-:::::::*
qualcomm	ipq6005_firmware	-	cpe:2.3:o:qualcomm:ipq6005_firmware:-:::::::*
qualcomm	ipq6005	-	cpe:2.3:h:qualcomm:ipq6005:-:::::::*

Rows per page:

1-10 of 1081

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Mobile",
      "Snapdragon Wired Infrastructure and Networking"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "CSR8811"
      },
      {
        "status": "affected",
        "version": "FastConnect 6200"
      },
      {
        "status": "affected",
        "version": "IPQ6000"
      },
      {
        "status": "affected",
        "version": "IPQ6005"
      },
      {
        "status": "affected",
        "version": "IPQ6010"
      },
      {
        "status": "affected",
        "version": "IPQ6018"
      },
      {
        "status": "affected",
        "version": "IPQ6028"
      },
      {
        "status": "affected",
        "version": "IPQ9008"
      },
      {
        "status": "affected",
        "version": "IPQ9574"
      },
      {
        "status": "affected",
        "version": "QCA4024"
      },
      {
        "status": "affected",
        "version": "QCA6574A"
      },
      {
        "status": "affected",
        "version": "QCA6574AU"
      },
      {
        "status": "affected",
        "version": "QCA6595AU"
      },
      {
        "status": "affected",
        "version": "QCA6696"
      },
      {
        "status": "affected",
        "version": "QCA8072"
      },
      {
        "status": "affected",
        "version": "QCA8075"
      },
      {
        "status": "affected",
        "version": "QCA8081"
      },
      {
        "status": "affected",
        "version": "QCA8082"
      },
      {
        "status": "affected",
        "version": "QCA8084"
      },
      {
        "status": "affected",
        "version": "QCA8085"
      },
      {
        "status": "affected",
        "version": "QCA8386"
      },
      {
        "status": "affected",
        "version": "QCN5021"
      },
      {
        "status": "affected",
        "version": "QCN5022"
      },
      {
        "status": "affected",
        "version": "QCN5052"
      },
      {
        "status": "affected",
        "version": "QCN5121"
      },
      {
        "status": "affected",
        "version": "QCN5122"
      },
      {
        "status": "affected",
        "version": "QCN5152"
      },
      {
        "status": "affected",
        "version": "QCN6023"
      },
      {
        "status": "affected",
        "version": "QCN6024"
      },
      {
        "status": "affected",
        "version": "QCN9000"
      },
      {
        "status": "affected",
        "version": "QCN9022"
      },
      {
        "status": "affected",
        "version": "QCN9024"
      },
      {
        "status": "affected",
        "version": "QCN9070"
      },
      {
        "status": "affected",
        "version": "QCN9072"
      },
      {
        "status": "affected",
        "version": "QCN9074"
      },
      {
        "status": "affected",
        "version": "QCN9274"
      },
      {
        "status": "affected",
        "version": "SA6145P"
      },
      {
        "status": "affected",
        "version": "SA6150P"
      },
      {
        "status": "affected",
        "version": "SA6155"
      },
      {
        "status": "affected",
        "version": "SA6155P"
      },
      {
        "status": "affected",
        "version": "SA8145P"
      },
      {
        "status": "affected",
        "version": "SA8150P"
      },
      {
        "status": "affected",
        "version": "SA8155"
      },
      {
        "status": "affected",
        "version": "SA8155P"
      },
      {
        "status": "affected",
        "version": "SA8195P"
      },
      {
        "status": "affected",
        "version": "SM7250P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2022-40522