CVE-2022-40538: Reachable assertion in Modem
Published Jun 5, 2023
·Updated
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.
Affected Software
53 affected components
Google Android
All of the following
Qualcomm Ar8035
Qualcomm Ar8035 Firmware
All of the following
Qualcomm Wcn685x-5
Qualcomm Wcn685x-5 Firmware
All of the following
Qualcomm Wcn685x-1
Qualcomm Wcn685x-1 Firmware
All of the following
Qualcomm Wcn785x-1
Qualcomm Wcn785x-1 Firmware
All of the following
Qualcomm Wcn785x-5
Qualcomm Wcn785x-5 Firmware
All of the following
Qualcomm QCA8081
Qualcomm Qca8081 Firmware
All of the following
Qualcomm Qca8337
Qualcomm Qca8337 Firmware
All of the following
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
All of the following
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
All of the following
Qualcomm Qcs8550 Firmware
Qualcomm Qcs8550
All of the following
Qualcomm Snapdragon X65 5g Modem-rf System Firmware
Qualcomm Snapdragon X65 5g Modem-rf System
All of the following
Qualcomm Snapdragon X70 Modem-rf System Firmware
Qualcomm Snapdragon X70 Modem-rf System
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
Qualcomm Wcn685x-5 Firmware
Qualcomm Wcn685x-5
Qualcomm Wcn685x-1 Firmware
Qualcomm Wcn685x-1
Qualcomm Wcn785x-1 Firmware
Qualcomm Wcn785x-1
Qualcomm Wcn785x-5 Firmware
Qualcomm Wcn785x-5
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
Qualcomm Qcs8550 Firmware
Qualcomm Qcs8550
Qualcomm Snapdragon X65 5g Modem-rf System Firmware
Qualcomm Snapdragon X65 5g Modem-rf System
Qualcomm Snapdragon X70 Modem-rf System Firmware
Qualcomm Snapdragon X70 Modem-rf System
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Event History
Jun 5, 2023
CVE Published
12:00 AM
Jun 6, 2023
CVE Published
via MITRE·07:39 AM
Data Sourced
via MITRE·07:39 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2022-40538.
2
What is the severity of CVE-2022-40538?
The severity of CVE-2022-40538 is high with a CVSS score of 7.5.
3
Which software is affected by CVE-2022-40538?
Google Android with Qualcomm AR8035 Firmware and Qualcomm Wcn685x-5 Firmware are affected by CVE-2022-40538.
4
How can I fix CVE-2022-40538?
To fix CVE-2022-40538, update to the latest firmware version provided by Qualcomm or follow the recommended patches and mitigations from the official sources.
5
Where can I find more information about CVE-2022-40538?
You can find more information about CVE-2022-40538 in the June 2023 bulletin from Qualcomm and the Android Security Bulletin for June 2023.