CVE-2022-40539

EPSS 0.13%
Veröffentlicht 10.03.2023 21:15:12
Zuletzt bearbeitet 21.11.2024 07:21:40
Erkennungen
Login

Improper Validation of Array Index in Automotive Android OS

Memory corruption in Automotive Android OS due to improper validation of array index.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 25 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Qam8295p Firmware Version -

Qualcomm ≫ Qam8295p Version -

Qualcomm ≫ Qca6574au Firmware Version -

Qualcomm ≫ Qca6574au Version -

Qualcomm ≫ Qca6696 Firmware Version -

Qualcomm ≫ Qca6696 Version -

Qualcomm ≫ Qcc5100 Firmware Version -

Qualcomm ≫ Qcc5100 Version -

Qualcomm ≫ Qcs410 Firmware Version -

Qualcomm ≫ Qcs410 Version -

Qualcomm ≫ Qcs610 Firmware Version -

Qualcomm ≫ Qcs610 Version -

Qualcomm ≫ Sa6145p Firmware Version -

Qualcomm ≫ Sa6145p Version -

Qualcomm ≫ Sa6150p Firmware Version -

Qualcomm ≫ Sa6150p Version -

Qualcomm ≫ Sa6155p Firmware Version -

Qualcomm ≫ Sa6155p Version -

Qualcomm ≫ Sa8145p Firmware Version -

Qualcomm ≫ Sa8145p Version -

Qualcomm ≫ Sa8150p Firmware Version -

Qualcomm ≫ Sa8150p Version -

Qualcomm ≫ Sa8155p Firmware Version -

Qualcomm ≫ Sa8155p Version -

Qualcomm ≫ Sa8195p Firmware Version -

Qualcomm ≫ Sa8195p Version -

Qualcomm ≫ Sa8295p Firmware Version -

Qualcomm ≫ Sa8295p Version -

Qualcomm ≫ Sw5100 Firmware Version -

Qualcomm ≫ Sw5100 Version -

Qualcomm ≫ Sw5100p Firmware Version -

Qualcomm ≫ Sw5100p Version -

Qualcomm ≫ Wcd9341 Firmware Version -

Qualcomm ≫ Wcd9341 Version -

Qualcomm ≫ Wcd9370 Firmware Version -

Qualcomm ≫ Wcd9370 Version -

Qualcomm ≫ Wcn3950 Firmware Version -

Qualcomm ≫ Wcn3950 Version -

Qualcomm ≫ Wcn3980 Firmware Version -

Qualcomm ≫ Wcn3980 Version -

Qualcomm ≫ Wcn3988 Firmware Version -

Qualcomm ≫ Wcn3988 Version -

Qualcomm ≫ Wsa8810 Firmware Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Firmware Version -

Qualcomm ≫ Wsa8815 Version -

Qualcomm ≫ Wsa8830 Firmware Version -

Qualcomm ≫ Wsa8830 Version -

Qualcomm ≫ Wsa8835 Firmware Version -

Qualcomm ≫ Wsa8835 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.13%	0.031

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-40539

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-40539

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-40539

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-40539