CVE-2022-40540: Qualcomm SD888 5g Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

Affected products

• Qualcomm SD888 5g Firmware: affected versions not specified
• Qualcomm Sd 8 GEN1 5g Firmware: affected versions not specified
• Qualcomm SW5100 Firmware: affected versions not specified
• Qualcomm SW5100P Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WCN3988 Firmware: affected versions not specified
• Qualcomm WCN6850 Firmware: affected versions not specified
• Qualcomm WCN6851 Firmware: affected versions not specified
• Qualcomm WCN6855 Firmware: affected versions not specified
• Qualcomm WCN6856 Firmware: affected versions not specified
• Qualcomm WCN7850 Firmware: affected versions not specified
• Qualcomm WCN7851 Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• Qualcomm WSA8835 Firmware: affected versions not specified

Published 2023-03-10. Last modified 2026-06-17.