Vulnerabilities (CVE)

Total 425466 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-40521 1 Qualcomm 484 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8953pro and 481 more 2026-06-17 N/A 7.5 HIGH
Transient DOS due to improper authorization in Modem
CVE-2022-40520 1 Qualcomm 294 Apq8064au, Apq8064au Firmware, Apq8096au and 291 more 2026-06-17 N/A 8.4 HIGH
Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40519 1 Qualcomm 386 Aqt1000, Aqt1000 Firmware, Ar8031 and 383 more 2026-06-17 N/A 6.8 MEDIUM
Information disclosure due to buffer overread in Core
CVE-2022-40518 1 Qualcomm 320 Aqt1000, Aqt1000 Firmware, Ar8031 and 317 more 2026-06-17 N/A 6.8 MEDIUM
Information disclosure due to buffer overread in Core
CVE-2022-40517 1 Qualcomm 362 Aqt1000, Aqt1000 Firmware, Ar8031 and 359 more 2026-06-17 N/A 8.4 HIGH
Memory corruption in core due to stack-based buffer overflow
CVE-2022-40516 1 Qualcomm 368 Aqt1000, Aqt1000 Firmware, Ar8031 and 365 more 2026-06-17 N/A 8.4 HIGH
Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-40515 1 Qualcomm 318 Apq8009, Apq8009 Firmware, Apq8009w and 315 more 2026-06-17 N/A 7.3 HIGH
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVE-2022-40514 1 Qualcomm 456 Aqt1000, Aqt1000 Firmware, Ar8031 and 453 more 2026-06-17 N/A 9.8 CRITICAL
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
CVE-2022-40513 1 Qualcomm 118 Csr8811, Csr8811 Firmware, Ipq5010 and 115 more 2026-06-17 N/A 7.5 HIGH
Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.
CVE-2022-40512 1 Qualcomm 590 Apq8009, Apq8009 Firmware, Apq8017 and 587 more 2026-06-17 N/A 7.5 HIGH
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-40510 1 Qualcomm 408 Apq8009, Apq8009 Firmware, Apq8009w and 405 more 2026-06-17 N/A 9.8 CRITICAL
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2022-40508 1 Qualcomm 136 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 133 more 2026-06-17 N/A 7.5 HIGH
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
CVE-2022-40507 1 Qualcomm 484 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 481 more 2026-06-17 N/A 8.4 HIGH
Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-40505 1 Qualcomm 26 9205 Lte Modem, 9205 Lte Modem Firmware, 9206 Lte Modem and 23 more 2026-06-17 N/A 8.2 HIGH
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
CVE-2022-40504 1 Qualcomm 378 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8905 and 375 more 2026-06-17 N/A 7.5 HIGH
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
CVE-2022-40503 1 Qualcomm 370 8905, 8905 Firmware, 8909 and 367 more 2026-06-17 N/A 8.2 HIGH
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-40502 1 Qualcomm 192 Csr8811, Csr8811 Firmware, Ipq5010 and 189 more 2026-06-17 N/A 7.5 HIGH
Transient DOS due to improper input validation in WLAN Host.
CVE-2022-40497 1 Wazuh 1 Wazuh 2026-06-17 N/A 8.8 HIGH
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.
CVE-2022-40494 1 Ehang-io 1 Nps 2026-06-17 N/A 9.8 CRITICAL
NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.
CVE-2022-40490 1 Prasathmani 1 Tiny File Manager 2026-06-17 N/A 4.8 MEDIUM
Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file.