CVE-2022-40505

HIGH

Qualcomm 9205 Lte Modem Firmware - Buffer Over-read

Title source: rule

Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

Core 1

Core References

Vendor Advisory

CVSS v3 8.2

EPSS 0.0030

EPSS Percentile 53.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-125 CWE-126

Status published

Products (13)

qualcomm/9205_lte_modem_firmware

qualcomm/9206_lte_modem_firmware

qualcomm/9207_lte_modem_firmware

qualcomm/mdm8207_firmware

qualcomm/qca4004_firmware

qualcomm/qca4010_firmware

qualcomm/qts110_firmware

qualcomm/snapdragon_1100_wearable_platform_firmware

qualcomm/snapdragon_1200_wearable_platform_firmware

qualcomm/snapdragon_wear_1300_platform_firmware

... and 3 more

Published May 02, 2023

Tracked Since Feb 18, 2026