Vulnerability · Published Jun 6, 2023 · Assigned by qualcomm
CVE-2022-40507Double free in Core
High 8.4
In plain English
A high-severity double free in Snapdragon from Qualcomm, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)1.3%top 29.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Memory corruption due to double free in Core while mapping HLOS address to the list.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm, Inc. | Snapdragon | 315 5G IoT Modem9205 LTE Modem9206 LTE Modem9207 LTE ModemAQT1000AR8031AR8035C-V2X 9150 |
Weakness: CWE-415 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H