Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-40510

Buffer copy without checking size of input in Audio.

Critical9.8EPSS 0.43%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

Timeline

  1. ID reserved

    By qualcomm

  2. · 11 months later

    Published

  3. · 12 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-40510, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.43% · top 63% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected APQ8009
    • affected APQ8009W
    • affected APQ8017
    • affected APQ8037
    • affected APQ8064AU
    • affected APQ8076
    • affected APQ8096AU
    • affected AQT1000
    • affected AR8031
    • affected AR8035
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected MDM8207
    • affected MDM9150
    • affected MDM9206
    • affected MDM9207
    • affected MDM9250
    • affected MDM9607
    • affected MDM9628
    • affected MDM9640
    • affected MDM9650
    • affected MSM8108
    • affected MSM8208
    • affected MSM8209
    • affected MSM8608
    • affected MSM8909W
    • affected MSM8917
    • affected MSM8920
    • affected MSM8937
    • affected MSM8940
    • affected MSM8996AU
    • affected PM8937
    • affected QAM8295P
    • affected QCA4020
    • affected QCA6174A
    • affected QCA6310
    • affected QCA6320
    • affected QCA6335
    • affected QCA6390
    • and 164 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-40510 badge
[![CVE-2022-40510](https://trackcve.app/badge/CVE-2022-40510.svg)](https://trackcve.app/cve/CVE-2022-40510)

Record last updated .