Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-40540


Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.


Published

2023-03-10T21:15:12.887

Last Modified

2024-11-21T07:21:40.887

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.4 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-120
  • Type: Primary
    CWE-120

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm sd_8_gen1_5g_firmware - Yes
Hardware qualcomm sm8475 - No
Operating System qualcomm sd888_5g_firmware - Yes
Hardware qualcomm sd888_5g - No
Operating System qualcomm sw5100_firmware - Yes
Hardware qualcomm sw5100 - No
Operating System qualcomm sw5100p_firmware - Yes
Hardware qualcomm sw5100p - No
Operating System qualcomm wcd9380_firmware - Yes
Hardware qualcomm wcd9380 - No
Operating System qualcomm wcd9385_firmware - Yes
Hardware qualcomm wcd9385 - No
Operating System qualcomm wcn3980_firmware - Yes
Hardware qualcomm wcn3980 - No
Operating System qualcomm wcn3988_firmware - Yes
Hardware qualcomm wcn3988 - No
Operating System qualcomm wcn6850_firmware - Yes
Hardware qualcomm wcn6850 - No
Operating System qualcomm wcn6851_firmware - Yes
Hardware qualcomm wcn6851 - No
Operating System qualcomm wcn6855_firmware - Yes
Hardware qualcomm wcn6855 - No
Operating System qualcomm wcn6856_firmware - Yes
Hardware qualcomm wcn6856 - No
Operating System qualcomm wcn7850_firmware - Yes
Hardware qualcomm wcn7850 - No
Operating System qualcomm wcn7851_firmware - Yes
Hardware qualcomm wcn7851 - No
Operating System qualcomm wsa8830_firmware - Yes
Hardware qualcomm wsa8830 - No
Operating System qualcomm wsa8835_firmware - Yes
Hardware qualcomm wsa8835 - No

References