CVE-2022-40539: Improper Validation of Array Index in Automotive Android OS
First published: Tue Mar 07 2023(Updated: )
Memory corruption in Automotive Android OS due to improper validation of array index.
Credit: product-security@qualcomm.com product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm Qam8295p Firmware | ||
| Qualcomm Qam8295p | ||
| Google Android | ||
| Qualcomm Qca6574au | ||
| Google Android | ||
| Qualcomm Qca6696 | ||
| Qualcomm Qcc5100 Firmware | ||
| Qualcomm Qcc5100 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sa6145p | ||
| Qualcomm Sa6150p Firmware | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sa6155p | ||
| Qualcomm Sa8145p Firmware | ||
| Qualcomm Sa8145p | ||
| Google Android | ||
| Qualcomm Sa8150p | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sa8195p Firmware | ||
| Google Android | ||
| Qualcomm Sa8295p Firmware | ||
| Qualcomm Sa8295p | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcd9341 Firmware | ||
| Google Android | ||
| Qualcomm Wcd9370 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Qualcomm Qam8295p Firmware | ||
| Qualcomm Qam8295p | ||
| All of | ||
| Google Android | ||
| Qualcomm Qca6574au | ||
| All of | ||
| Google Android | ||
| Qualcomm Qca6696 | ||
| All of | ||
| Qualcomm Qcc5100 Firmware | ||
| Qualcomm Qcc5100 | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Qualcomm Sa6145p | ||
| All of | ||
| Qualcomm Sa6150p Firmware | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Qualcomm Sa6155p | ||
| All of | ||
| Qualcomm Sa8145p Firmware | ||
| Qualcomm Sa8145p | ||
| All of | ||
| Google Android | ||
| Qualcomm Sa8150p | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Qualcomm Sa8195p Firmware | ||
| Google Android | ||
| All of | ||
| Qualcomm Sa8295p Firmware | ||
| Qualcomm Sa8295p | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Qualcomm Wcd9341 Firmware | ||
| Google Android | ||
| All of | ||
| Qualcomm Wcd9370 Firmware | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this memory corruption vulnerability?
The vulnerability ID for this memory corruption vulnerability is CVE-2022-40539.
What is the severity of CVE-2022-40539?
The severity of CVE-2022-40539 is high, with a severity value of 7.8.
Which software is affected by CVE-2022-40539?
The software affected by CVE-2022-40539 includes Qualcomm Qam8295p Firmware, Google Android, Qualcomm Qcc5100 Firmware, and Qualcomm Sa6145p Firmware.
What is the cause of the memory corruption vulnerability?
The memory corruption vulnerability is caused by improper validation of array index in the Automotive Android OS.
How can I fix the memory corruption vulnerability?
To fix the memory corruption vulnerability, it is recommended to apply the patches provided by Qualcomm and follow their security bulletin.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/title
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/qualcomm
- canonical/qualcomm qam8295p firmware
- canonical/qualcomm qam8295p
- canonical/google android
- canonical/qualcomm qca6574au
- canonical/qualcomm qca6696
- canonical/qualcomm qcc5100 firmware
- canonical/qualcomm qcc5100
- canonical/qualcomm sa6145p
- canonical/qualcomm sa6150p firmware
- canonical/qualcomm sa6155p
- canonical/qualcomm sa8145p firmware
- canonical/qualcomm sa8145p
- canonical/qualcomm sa8150p
- canonical/qualcomm sa8195p firmware
- canonical/qualcomm sa8295p firmware
- canonical/qualcomm sa8295p
- canonical/qualcomm wcd9341 firmware
- canonical/qualcomm wcd9370 firmware