CVE-2022-40515: Qualcomm APQ8009 Firmware

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

Affected products

• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm APQ8009W Firmware: affected versions not specified
• Qualcomm APQ8052 Firmware: affected versions not specified
• Qualcomm APQ8056 Firmware: affected versions not specified
• Qualcomm APQ8064AU Firmware: affected versions not specified
• Qualcomm APQ8076 Firmware: affected versions not specified
• Qualcomm APQ8096AU Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm MDM9150 Firmware: affected versions not specified
• Qualcomm MDM9206 Firmware: affected versions not specified
• Qualcomm MDM9250 Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm MSM8108 Firmware: affected versions not specified
• Qualcomm MSM8208 Firmware: affected versions not specified
• Qualcomm MSM8209 Firmware: affected versions not specified
• Qualcomm MSM8608 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm MSM8952 Firmware: affected versions not specified
• Qualcomm MSM8956 Firmware: affected versions not specified
• Qualcomm MSM8976 Firmware: affected versions not specified
• and 134 more

Published 2023-03-10. Last modified 2026-06-17.