8.2
High
CVE-2022-40505 Information disclosure due to buffer over-read in Modem while parsing DNS hostname
Description
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| 9205_lte_modem_firmware | Versions not published | |
| 9206_lte_modem_firmware | Versions not published | |
| 9207_lte_modem_firmware | Versions not published | |
| mdm8207_firmware | Versions not published | |
| qca4004_firmware | Versions not published | |
| qca4010_firmware | Versions not published | |
| qts110_firmware | Versions not published | |
| snapdragon_1100_wearable_platform_firmware | Versions not published |
Show the 5 other branches Hide the 5 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| snapdragon_1200_wearable_platform_firmware | Versions not published | |
| snapdragon_wear_1300_platform_firmware | Versions not published | |
| snapdragon_x5_lte_modem_firmware | Versions not published | |
| wcd9306_firmware | Versions not published | |
| wcd9330_firmware | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High