CVE-2022-40508: Qualcomm 315 5g IoT Modem Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6421 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6431 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCN6024 Firmware: affected versions not specified
• Qualcomm QCN9024 Firmware: affected versions not specified
• Qualcomm SD855 Firmware: affected versions not specified
• Qualcomm SD865 5g Firmware: affected versions not specified
• Qualcomm SD888 Firmware: affected versions not specified
• Qualcomm SDX55 Firmware: affected versions not specified
• Qualcomm SDX57M Firmware: affected versions not specified
• Qualcomm SM4350-Ac Firmware: affected versions not specified
• Qualcomm SM4350 Firmware: affected versions not specified
• and 43 more

Published 2023-05-02. Last modified 2026-06-17.