Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-40514 EUVD-2022-43789GHSA-vjfc-6h99-w884

Buffer copy without checking size of input in WLAN Firmware

Published Feb 9, 2023 · Updated Aug 3, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ5010, IPQ5018, IPQ5028, IPQ6000, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8070A, IPQ8071A, IPQ8072A, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, IPQ9574, QAM8295P, QCA1062, QCA1064, QCA… —

Advisories 1

References