CVE-2022-40522
High
Published: 06 June 2023
Published
06 June 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0007
21.9th percentile
Risk Priority
17
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-40522 is a high-severity Double Free (CWE-415) vulnerability in Qualcomm Csr8811 Firmware. Its CVSS base score is 8.4 (High).
Operationally, ranked at the 21.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-43797
Vulnerability details
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
qualcomm
csr8811 firmware
all versions
qualcomm
wcn3991 firmware
all versions
qualcomm
wcn3998 firmware
all versions
qualcomm
ipq6000 firmware
all versions
qualcomm
ipq6005 firmware
all versions
qualcomm
ipq6010 firmware
all versions
qualcomm
ipq6018 firmware
all versions
qualcomm
ipq6028 firmware
all versions
qualcomm
ipq9008 firmware
all versions
qualcomm
ipq9574 firmware
all versions
+44 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.