CVE-2022-40514 — Classic Buffer Overflow in INC Snapdragon

CWE-120 — Classic Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.3%
top 44.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qualcomm INC SnapdragonGoogle Android
Timeline
PublishedFeb 12

Description

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5qualcomm_inc/snapdragon228 versions+227

🔴Vulnerability Details

1
GHSA
GHSA-vjfc-6h99-w884: Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame↗2023-02-12
▶

📋Vendor Advisories

1
Android
CVE-2022-40514: Closed-source component↗2023-02-01
▶