CVE-2022-40507: Qualcomm 315 5g IoT Modem Firmware

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Memory corruption due to double free in Core while mapping HLOS address to the list.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm 9205 Lte Modem Firmware: affected versions not specified
• Qualcomm 9206 Lte Modem Firmware: affected versions not specified
• Qualcomm 9207 Lte Modem Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm FSM10056 Firmware: affected versions not specified
• Qualcomm Home Hub 100 Platform Firmware: affected versions not specified
• Qualcomm MDM8207 Firmware: affected versions not specified
• Qualcomm MDM9250 Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm MSM8108 Firmware: affected versions not specified
• Qualcomm MSM8209 Firmware: affected versions not specified
• Qualcomm MSM8608 Firmware: affected versions not specified
• Qualcomm MSM8905 Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QAM8650P Firmware: affected versions not specified
• Qualcomm QAM8775P Firmware: affected versions not specified
• and 217 more

Published 2023-06-06. Last modified 2026-06-17.