Lucene search

QualcommCVE-2022-40534

HistorySep 05, 2023 - 7:15 a.m.

CVE-2022-40534

2023-09-0507:15:12

CWE-129

qualcomm

web.nvd.nist.gov

cve-2022-40534

memory corruption

audio

nvd

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Memory corruption due to improper validation of array index in Audio.

Affected configurations

Nvd

Node

qualcommwcn685x-5_firmwareMatch-

AND

qualcommwcn685x-5Match-

Node

qualcommwcn685x-1_firmwareMatch-

AND

qualcommwcn685x-1Match-

Node

qualcommwcn785x-1_firmwareMatch-

AND

qualcommwcn785x-1Match-

Node

qualcommwcn785x-5_firmwareMatch-

AND

qualcommwcn785x-5Match-

Node

qualcommsnapdragon_w5\+_gen_1_wearable_platform_firmwareMatch-

AND

qualcommsnapdragon_w5\+_gen_1_wearable_platformMatch-

Node

qualcommsw5100_firmwareMatch-

AND

qualcommsw5100Match-

Node

qualcommsw5100p_firmwareMatch-

AND

qualcommsw5100pMatch-

Node

qualcommsxr2230p_firmwareMatch-

AND

qualcommsxr2230pMatch-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8832_firmwareMatch-

AND

qualcommwsa8832Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

VendorProductVersionCPE
qualcommwcn685x-5_firmware-cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:*:*:*:*:*:*:*
qualcommwcn685x-5-cpe:2.3:h:qualcomm:wcn685x-5:-:*:*:*:*:*:*:*
qualcommwcn685x-1_firmware-cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:*:*:*:*:*:*:*
qualcommwcn685x-1-cpe:2.3:h:qualcomm:wcn685x-1:-:*:*:*:*:*:*:*
qualcommwcn785x-1_firmware-cpe:2.3:o:qualcomm:wcn785x-1_firmware:-:*:*:*:*:*:*:*
qualcommwcn785x-1-cpe:2.3:h:qualcomm:wcn785x-1:-:*:*:*:*:*:*:*
qualcommwcn785x-5_firmware-cpe:2.3:o:qualcomm:wcn785x-5_firmware:-:*:*:*:*:*:*:*
qualcommwcn785x-5-cpe:2.3:h:qualcomm:wcn785x-5:-:*:*:*:*:*:*:*
qualcommsnapdragon_w5\+_gen_1_wearable_platform_firmware-cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*
qualcommsnapdragon_w5\+_gen_1_wearable_platform-cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable_platform:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	wcn685x-5_firmware	-	cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:::::::*
qualcomm	wcn685x-5	-	cpe:2.3:h:qualcomm:wcn685x-5:-:::::::*
qualcomm	wcn685x-1_firmware	-	cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:::::::*
qualcomm	wcn685x-1	-	cpe:2.3:h:qualcomm:wcn685x-1:-:::::::*
qualcomm	wcn785x-1_firmware	-	cpe:2.3:o:qualcomm:wcn785x-1_firmware:-:::::::*
qualcomm	wcn785x-1	-	cpe:2.3:h:qualcomm:wcn785x-1:-:::::::*
qualcomm	wcn785x-5_firmware	-	cpe:2.3:o:qualcomm:wcn785x-5_firmware:-:::::::*
qualcomm	wcn785x-5	-	cpe:2.3:h:qualcomm:wcn785x-5:-:::::::*
qualcomm	snapdragon_w5\+_gen_1_wearable_platform_firmware	-	cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:::::::*
qualcomm	snapdragon_w5\+_gen_1_wearable_platform	-	cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable_platform:-:::::::*

Rows per page:

1-10 of 261

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Compute",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "Snapdragon W5+ Gen 1 Wearable Platform"
      },
      {
        "status": "affected",
        "version": "SW5100"
      },
      {
        "status": "affected",
        "version": "SW5100P"
      },
      {
        "status": "affected",
        "version": "SXR2230P"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8832"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2022-40534