#VU76863 Information exposure in Qualcomm products - CVE-2022-40525
Published: June 5, 2023
Vulnerability identifier: #VU76863
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-40525
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
CSR8811
IPQ6000
IPQ6005
IPQ6010
IPQ6018
IPQ6028
IPQ9008
IPQ9574
QCA4024
QCA8072
QCA8075
QCA8081
QCA8082
QCA8084
QCA8085
QCA8386
QCN5021
QCN5022
QCN5052
QCN5121
QCN5122
QCN5152
QCN6023
QCN6024
QCN9000
QCN9022
QCN9024
QCN9070
QCN9072
QCN9074
QCN9274
CSR8811
IPQ6000
IPQ6005
IPQ6010
IPQ6018
IPQ6028
IPQ9008
IPQ9574
QCA4024
QCA8072
QCA8075
QCA8081
QCA8082
QCA8084
QCA8085
QCA8386
QCN5021
QCN5022
QCN5052
QCN5121
QCN5122
QCN5152
QCN6023
QCN6024
QCN9000
QCN9022
QCN9024
QCN9070
QCN9072
QCN9074
QCN9274
Software vendor:
Qualcomm
Qualcomm
Description
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to improper input validation in Linux Networking Firmware. A local application can gain access to sensitive information.
Remediation
Install security update from vendor's website.