8.4
High
CVE-2022-40539 Memory corruption in Automotive Android OS due to improper validation of array index
Description
Memory corruption in Automotive Android OS due to improper validation of array index.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| qam8295p_firmware | Versions not published | |
| qca6574au_firmware | Versions not published | |
| qca6696_firmware | Versions not published | |
| qcc5100_firmware | Versions not published | |
| qcs410_firmware | Versions not published | |
| qcs610_firmware | Versions not published | |
| sa6145p_firmware | Versions not published | |
| sa6150p_firmware | Versions not published |
Show the 17 other branches Hide the 17 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| sa6155p_firmware | Versions not published | |
| sa8145p_firmware | Versions not published | |
| sa8150p_firmware | Versions not published | |
| sa8155p_firmware | Versions not published | |
| sa8195p_firmware | Versions not published | |
| sa8295p_firmware | Versions not published | |
| sw5100_firmware | Versions not published | |
| sw5100p_firmware | Versions not published | |
| wcd9341_firmware | Versions not published | |
| wcd9370_firmware | Versions not published | |
| wcn3950_firmware | Versions not published | |
| wcn3980_firmware | Versions not published | |
| wcn3988_firmware | Versions not published | |
| wsa8810_firmware | Versions not published | |
| wsa8815_firmware | Versions not published | |
| wsa8830_firmware | Versions not published | |
| wsa8835_firmware | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High