Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-40514

Buffer copy without checking size of input in WLAN Firmware

Critical9.8EPSS 0.47%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Timeline

  1. ID reserved

    By qualcomm

  2. · 5 months later

    Published

  3. · 18 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-40514, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.47% · top 59% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected AQT1000
    • affected AR8031
    • affected AR8035
    • affected AR9380
    • affected CSR8811
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected IPQ5010
    • affected IPQ5018
    • affected IPQ5028
    • affected IPQ6000
    • affected IPQ6010
    • affected IPQ6018
    • affected IPQ6028
    • affected IPQ8064
    • affected IPQ8065
    • affected IPQ8068
    • affected IPQ8070A
    • affected IPQ8071A
    • affected IPQ8072A
    • affected IPQ8074A
    • affected IPQ8076
    • affected IPQ8076A
    • affected IPQ8078
    • affected IPQ8078A
    • affected IPQ8173
    • affected IPQ8174
    • affected IPQ9574
    • affected QAM8295P
    • affected QCA1062
    • affected QCA1064
    • affected QCA2062
    • affected QCA2064
    • affected QCA2065
    • affected QCA2066
    • affected QCA4024
    • affected QCA6310
    • affected QCA6320
    • affected QCA6335
    • and 188 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-40514 badge
[![CVE-2022-40514](https://trackcve.app/badge/CVE-2022-40514.svg)](https://trackcve.app/cve/CVE-2022-40514)

Record last updated .