Skip to content
Fencer Vulns
critical 9.8

CVE-2022-40510 json

Buffer copy without checking size of input in Audio.

published 2023-08-08 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-43785

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 37%
public exploits
0
none known

Summary

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.43% chance of exploitation in the next 30 days, higher than 37% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm apq8009_firmware
  • qualcomm apq8009w_firmware
  • qualcomm apq8017_firmware
  • qualcomm apq8037_firmware
  • qualcomm apq8064au_firmware
  • qualcomm apq8076_firmware
  • qualcomm apq8096au_firmware
  • qualcomm aqt1000_firmware
  • qualcomm ar8031_firmware
  • qualcomm ar8035_firmware
  • qualcomm csra6620_firmware
  • qualcomm csra6640_firmware
  • qualcomm csrb31024_firmware
  • qualcomm mdm8207_firmware
  • qualcomm mdm9150_firmware
  • qualcomm mdm9206_firmware
  • qualcomm mdm9207_firmware
  • qualcomm mdm9250_firmware
  • qualcomm mdm9607_firmware
  • qualcomm mdm9628_firmware
  • qualcomm mdm9640_firmware
  • qualcomm mdm9650_firmware
  • qualcomm msm8108_firmware
  • qualcomm msm8208_firmware
  • qualcomm msm8209_firmware
  • qualcomm msm8608_firmware
  • qualcomm msm8909w_firmware
  • qualcomm msm8917_firmware
  • qualcomm msm8920_firmware
  • qualcomm msm8937_firmware
  • qualcomm msm8940_firmware
  • qualcomm msm8996au_firmware
  • qualcomm pm8937_firmware
  • qualcomm qam8295p_firmware
  • qualcomm qca4020_firmware
  • qualcomm qca6174a_firmware
  • qualcomm qca6310_firmware
  • qualcomm qca6320_firmware
  • qualcomm qca6335_firmware
  • qualcomm qca6390_firmware
  • qualcomm qca6391_firmware
  • qualcomm qca6420_firmware
  • qualcomm qca6421_firmware
  • qualcomm qca6426_firmware
  • qualcomm qca6430_firmware
  • qualcomm qca6431_firmware
  • qualcomm qca6436_firmware
  • qualcomm qca6564a_firmware
  • qualcomm qca6564au_firmware

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.