Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-40510 EUVD-2022-43785GHSA-6f27-8674-h7p8

Buffer copy without checking size of input in Audio.

Published Aug 8, 2023 · Updated Aug 3, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon APQ8009, APQ8009W, APQ8017, APQ8037, APQ8064AU, APQ8076, APQ8096AU, AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, CSRB31024, MDM8207, MDM9150, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9640, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8996AU, P… —

Advisories 2

References