CVE-2022-40510
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.12%
- CWE
- CWE-457
- Published
- 2023-08-08
- Last modified
- 2026-03-13
Affected products
- Qualcomm, Inc. Snapdragon
- Qualcomm, Inc. Snapdragon
- Qualcomm, Inc. Snapdragon
- Qualcomm, Inc. Snapdragon
- Qualcomm, Inc. Snapdragon
- Qualcomm, Inc. Snapdragon
- Qualcomm, Inc. Snapdragon
- Qualcomm, Inc. Snapdragon
Weakness type
Related vulnerabilities
- CVE-2026-78935 — Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to p
- CVE-2026-14405 — Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code insi
- CVE-2024-7022 — Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memor
- CVE-2026-13825 — Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap
- CVE-2024-10934 — OpenBSD NFS double-free vulnerability
- CVE-2026-14413 — Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the ren
- CVE-2026-10960 — Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the re
- CVE-2024-6990 — Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially pe