CVE-2022-40538: Qualcomm AR8035 Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCN6024 Firmware: affected versions not specified
• Qualcomm QCN9024 Firmware: affected versions not specified
• Qualcomm QCS8550 Firmware: affected versions not specified
• Qualcomm Snapdragon x65 5g Modem-Rf System Firmware: affected versions not specified
• Qualcomm Snapdragon x70 Modem-Rf System Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCN685X-1 Firmware: affected versions not specified
• Qualcomm WCN685X-5 Firmware: affected versions not specified
• Qualcomm WCN785X-1 Firmware: affected versions not specified
• Qualcomm WCN785X-5 Firmware: affected versions not specified

Published 2023-06-06. Last modified 2026-06-17.