CVE-2022-40503: Qualcomm 8905 Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

Affected products

• Qualcomm 8905 Firmware: affected versions not specified
• Qualcomm 8909 Firmware: affected versions not specified
• Qualcomm 8953 Firmware: affected versions not specified
• Qualcomm 8953pro Firmware: affected versions not specified
• Qualcomm 9206 Lte Modem Firmware: affected versions not specified
• Qualcomm APQ5053-Aa Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8053-Aa Firmware: affected versions not specified
• Qualcomm APQ8053-Ac Firmware: affected versions not specified
• Qualcomm APQ8053-Lite Firmware: affected versions not specified
• Qualcomm APQ8064AU Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm Flight RB5 5g Platform Firmware: affected versions not specified
• Qualcomm MDM9250 Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm MSM8108 Firmware: affected versions not specified
• Qualcomm MSM8209 Firmware: affected versions not specified
• Qualcomm MSM8608 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm MSM8996AU Firmware: affected versions not specified
• and 160 more

Published 2023-04-13. Last modified 2026-06-17.