high8.4
CVE-2022-40540
Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.
Impact
Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Sd 8 Gen1 5g Firmware | All versions |
| Qualcomm | Sd888 5g Firmware | All versions |
| Qualcomm | Sw5100 Firmware | All versions |
| Qualcomm | Sw5100p Firmware | All versions |
| Qualcomm | Wcd9380 Firmware | All versions |
| Qualcomm | Wcd9385 Firmware | All versions |
| Qualcomm | Wcn3980 Firmware | All versions |
| Qualcomm | Wcn3988 Firmware | All versions |
| Qualcomm | Wcn6850 Firmware | All versions |
| Qualcomm | Wcn6851 Firmware | All versions |
| Qualcomm | Wcn6855 Firmware | All versions |
| Qualcomm | Wcn6856 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.suse.com/show_bug.cgi?id=1209597
- https://security.netapp.com/advisory/ntap-20230616-0001/
- https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
- https://bugzilla.suse.com/show_bug.cgi?id=1209597
- https://security.netapp.com/advisory/ntap-20230616-0001/
- https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin