Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2022-40537

HIGH
Published 2023-03-07T04:43:54.084Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2022-40537. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1
7.3
/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score Metrics
Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14
0.001
probability
of exploitation in the wild

There is a 0.1% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25
Exploit Probability
Percentile: 0.223
Higher than 22.3% of all CVEs

Attack Vector Metrics

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED

Impact Metrics

Confidentiality
LOW
Integrity
LOW
Availability
LOW

Description

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Qualcomm, Inc.

Snapdragon

Affected Versions:

APQ8009 APQ8009W APQ8017 APQ8064AU APQ8096AU AQT1000 AR8031 CSRA6620 CSRA6640 MDM9150 MDM9250 MDM9607 MDM9628 MDM9650 MSM8108 MSM8208 MSM8209 MSM8608 MSM8909W MSM8917 MSM8996AU QCA6174A QCA6310 QCA6320 QCA6335 QCA6390 QCA6391 QCA6420 QCA6426 QCA6430 QCA6436 QCA6564A QCA6564AU QCA6574 QCA6574A QCA6574AU QCA6584AU QCA6595AU QCA6696 QCA8337 QCA9377 QCC5100 QCM2290 QCM4290 QCM6125 QCM6490 QCN7606 QCN9011 QCN9012 QCN9074 QCS2290 QCS405 QCS410 QCS4290 QCS605 QCS610 QCS6125 QCS6490 QRB5165 QRB5165M QRB5165N Qualcomm215 SA6145P SA6150P SA6155P SA8145P SA8150P SA8155 SA8155P SA8195P SD 636 SD 675 SD 8 Gen1 5G SD205 SD210 SD429 SD439 SD450 SD460 SD480 SD625 SD626 SD632 SD660 SD662 SD665 SD670 SD675 SD678 SD680 SD690 5G SD695 SD710 SD720G SD730 SD750G SD765 SD765G SD768G SD778G SD780G SD835 SD845 SD855 SD865 5G SD870 SD888 SD888 5G SDM429W SDM630 SDW2500 SDX20 SDX20M SDX24 SDX50M SDX55 SDX55M SDXR1 SDXR2 5G SM4125 SM6250 SM7250P SM7315 SM7325P Snapdragon 4 Gen 1 SW5100 SW5100P SXR2150P WCD9326 WCD9335 WCD9340 WCD9341 WCD9370 WCD9375 WCD9380 WCD9385 WCN3610 WCN3615 WCN3620 WCN3660 WCN3660B WCN3680 WCN3680B WCN3910 WCN3950 WCN3980 WCN3988 WCN3990 WCN3991 WCN3998 WCN6740 WCN6750 WCN6850 WCN6851 WCN6855 WCN6856 WCN7850 WCN7851 WSA8810 WSA8815 WSA8830 WSA8835

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed CRITICAL

GHSA-7mvh-wrx9-f9mm

Advisory Details

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

CVSS Scoring

CVSS Score

9.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-40537
WEB https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

Advisory provided by GitHub Security Advisory Database. Published: March 10, 2023, Modified: March 16, 2023

References

https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
Published: 2023-03-07T04:43:54.084Z
Last Modified: 2024-08-03T12:21:46.193Z
Copied to clipboard!