Skip to content
Fencer Vulns
high 7.5

CVE-2022-40508 json

Reachable assertion in Modem

published 2023-05-02 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-43783

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 32%
public exploits
0
none known

Summary

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm 315_5g_iot_modem_firmware
  • qualcomm aqt1000_firmware
  • qualcomm ar8035_firmware
  • qualcomm fastconnect_6200_firmware
  • qualcomm fastconnect_6700_firmware
  • qualcomm fastconnect_6800_firmware
  • qualcomm fastconnect_6900_firmware
  • qualcomm fastconnect_7800_firmware
  • qualcomm qca6391_firmware
  • qualcomm qca6421_firmware
  • qualcomm qca6426_firmware
  • qualcomm qca6431_firmware
  • qualcomm qca6436_firmware
  • qualcomm qca6574a_firmware
  • qualcomm qca6574au_firmware
  • qualcomm qca6595au_firmware
  • qualcomm qca6696_firmware
  • qualcomm qca6698aq_firmware
  • qualcomm qca8081_firmware
  • qualcomm qca8337_firmware
  • qualcomm qcn6024_firmware
  • qualcomm qcn9024_firmware
  • qualcomm sd855_firmware
  • qualcomm sd865_5g_firmware
  • qualcomm sd888_firmware
  • qualcomm sdx55_firmware
  • qualcomm sdx57m_firmware
  • qualcomm sm7250p_firmware
  • qualcomm sm7315_firmware
  • qualcomm snapdragon_4_gen_1_mobile_platform_firmware
  • qualcomm snapdragon_480_5g_mobile_platform_firmware
  • qualcomm snapdragon_690_5g_mobile_platform_firmware
  • qualcomm snapdragon_695_5g_mobile_platform_firmware
  • qualcomm snapdragon_750g_5g_mobile_platform_firmware
  • qualcomm snapdragon_780g_5g_mobile_platform_firmware
  • qualcomm snapdragon_8_gen_1_mobile_platform_firmware
  • qualcomm snapdragon_855_mobile_platform_firmware
  • qualcomm snapdragon_865_5g_mobile_platform_firmware
  • qualcomm snapdragon_auto_5g_modem-rf_firmware
  • qualcomm snapdragon_x50_5g_modem-rf_system_firmware
  • qualcomm snapdragon_x55_5g_modem-rf_system_firmware
  • qualcomm snapdragon_x65_5g_modem-rf_system_firmware
  • qualcomm snapdragon_x70_modem-rf_system_firmware
  • qualcomm snapdragon_xr2_5g_platform_firmware
  • qualcomm sxr2130_firmware
  • qualcomm wcd9341_firmware
  • qualcomm wcd9360_firmware
  • qualcomm wcd9370_firmware
  • qualcomm wcd9375_firmware

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.