CVE-2022-40505: Buffer over-read in Modem
First published: Tue May 02 2023(Updated: )
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
Credit: product-security@qualcomm.com product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm 9205 Lte Modem Firmware | ||
| Qualcomm 9205 Lte Modem | ||
| Qualcomm 9206 Lte Modem Firmware | ||
| Qualcomm 9206 Lte Modem | ||
| Qualcomm 9207 Lte Modem Firmware | ||
| Qualcomm 9207 Lte Modem | ||
| Qualcomm Mdm8207 Firmware | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qca4004 | ||
| Qualcomm Qca4010 Firmware | ||
| Qualcomm Qca4010 | ||
| Qualcomm Qts110 Firmware | ||
| Qualcomm Qts110 | ||
| Qualcomm Snapdragon 1100 Wearable Platform Firmware | ||
| Qualcomm Snapdragon 1100 Wearable Platform | ||
| Qualcomm Snapdragon 1200 Wearable Platform Firmware | ||
| Qualcomm Snapdragon 1200 Wearable Platform | ||
| Qualcomm Snapdragon Wear 1300 Platform Firmware | ||
| Qualcomm Snapdragon Wear 1300 Platform | ||
| Qualcomm Snapdragon X5 Lte Modem Firmware | ||
| Qualcomm Snapdragon X5 Lte Modem | ||
| Qualcomm Wcd9306 Firmware | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcd9330 | ||
| All of | ||
| Qualcomm 9205 Lte Modem | ||
| Qualcomm 9205 Lte Modem Firmware | ||
| All of | ||
| Qualcomm 9206 Lte Modem | ||
| Qualcomm 9206 Lte Modem Firmware | ||
| All of | ||
| Qualcomm 9207 Lte Modem | ||
| Qualcomm 9207 Lte Modem Firmware | ||
| All of | ||
| Google Android | ||
| Qualcomm Mdm8207 Firmware | ||
| All of | ||
| Qualcomm Qca4004 | ||
| Google Android | ||
| All of | ||
| Qualcomm Qca4010 | ||
| Qualcomm Qca4010 Firmware | ||
| All of | ||
| Qualcomm Qts110 Firmware | ||
| Qualcomm Qts110 | ||
| All of | ||
| Qualcomm Snapdragon 1100 Wearable Platform Firmware | ||
| Qualcomm Snapdragon 1100 Wearable Platform | ||
| All of | ||
| Qualcomm Snapdragon 1200 Wearable Platform Firmware | ||
| Qualcomm Snapdragon 1200 Wearable Platform | ||
| All of | ||
| Qualcomm Snapdragon Wear 1300 Platform Firmware | ||
| Qualcomm Snapdragon Wear 1300 Platform | ||
| All of | ||
| Qualcomm Snapdragon X5 Lte Modem Firmware | ||
| Qualcomm Snapdragon X5 Lte Modem | ||
| All of | ||
| Qualcomm Wcd9306 Firmware | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Qualcomm Wcd9330 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-40505?
CVE-2022-40505 is a vulnerability that allows for information disclosure due to a buffer over-read in Modem while parsing DNS hostname.
Which software are affected by CVE-2022-40505?
Qualcomm 9205 Lte Modem Firmware, Qualcomm 9206 Lte Modem Firmware, Qualcomm 9207 Lte Modem Firmware, Qualcomm Mdm8207 Firmware, Qualcomm Qca4004 Firmware, Qualcomm Qca4010 Firmware, Qualcomm Qts110 Firmware, Qualcomm Snapdragon 1100 Wearable Platform Firmware, Qualcomm Snapdragon 1200 Wearable Platform Firmware, Qualcomm Snapdragon Wear 1300 Platform Firmware, Qualcomm Snapdragon X5 Lte Modem Firmware, Qualcomm Wcd9306 Firmware, Qualcomm Wcd9330 Firmware are affected by CVE-2022-40505.
What is the severity of CVE-2022-40505?
The severity of CVE-2022-40505 is high, with a severity value of 7.5.
How can I fix CVE-2022-40505?
There is no official fix or patch available for CVE-2022-40505 at the moment. It is recommended to follow the recommendations provided by the vendor and apply any updates or patches as soon as they become available.
Where can I find more information about CVE-2022-40505?
More information about CVE-2022-40505 can be found on the official bulletin page of the Qualcomm website: [LINK]
- collector/nvd-latest
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/qualcomm
- canonical/qualcomm 9205 lte modem firmware
- canonical/qualcomm 9205 lte modem
- canonical/qualcomm 9206 lte modem firmware
- canonical/qualcomm 9206 lte modem
- canonical/qualcomm 9207 lte modem firmware
- canonical/qualcomm 9207 lte modem
- canonical/qualcomm mdm8207 firmware
- canonical/google android
- canonical/qualcomm qca4004
- canonical/qualcomm qca4010 firmware
- canonical/qualcomm qca4010
- canonical/qualcomm qts110 firmware
- canonical/qualcomm qts110
- canonical/qualcomm snapdragon 1100 wearable platform firmware
- canonical/qualcomm snapdragon 1100 wearable platform
- canonical/qualcomm snapdragon 1200 wearable platform firmware
- canonical/qualcomm snapdragon 1200 wearable platform
- canonical/qualcomm snapdragon wear 1300 platform firmware
- canonical/qualcomm snapdragon wear 1300 platform
- canonical/qualcomm snapdragon x5 lte modem firmware
- canonical/qualcomm snapdragon x5 lte modem
- canonical/qualcomm wcd9306 firmware
- canonical/qualcomm wcd9330