4457 matches found
CVE-2025-20647
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
CVE-2025-20647: NULL Pointer Dereference
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
PT-2025-35541
Name of the Vulnerable Software and Affected Versions Qualcomm Multi-Mode Call Processor affected versions not specified Qualcomm Snapdragon chips affected versions not specified Description A memory corruption issue exists when selecting the PLMN Public Land Mobile Network from the SOR Serving a...
MediaTek Modem 代码问题漏洞
MediaTek Modem is a 5G modem technology from China-based MediaTek. A security vulnerability exists in MediaTek Modem that stems from a lack of boundary checking and could lead to a remote denial of service...
CVE-2025-20644: Improper Validation of Syntactic Correctness of Input
In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...
MediaTek Modem 安全漏洞
MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A security vulnerability exists in MediaTek Modem that stems from mishandling of errors and could lead to a remote denial of service...
PUB-A-303771271
there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
DrayTek Vigor 165 安全漏洞
The DrayTek Vigor 165 is a VDSL2 35b hypervector modem/router from China DrayTek DrayTek. A security vulnerability exists in the DrayTek Vigor 165 that stems from passwords being stored in plaintext...
PT-2025-7541
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for this issue Description A memory corruption issue exists due to incorrect handling of control transfer buffer sizes in the usb: cdc-acm module. When the first fragment is...
Astra Linux – Vulnerability in Zabbix
Zabbix allows for the configuration of SMS notifications. AT command injection occurs on the “Zabbix Server” because there is no validation of the “Number” field either on the web interface or on the Zabbix server side. An attacker can send specially crafted phone numbers via SMS and execute...
Astra Linux – Vulnerability in Zabbix
Setting the SMS media allows for setting the GSM modem file. This file is later used as a Linux device. But since everything is a file for Linux, it’s possible to set another file, such as a log file. In this case, Zabbixserver will attempt to communicate with it as a modem. As a result, the log...
CVE-2025-20634
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Pat...
CVE-2024-38404
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...
CVE-2022-25738
Information disclosure in modem due to buffer over-red while performing checksum of packet received...
CVE-2022-25747
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...
CVE-2022-25729
Memory corruption in modem due to improper length check while copying into memory...
CVE-2022-25730
Information disclosure in modem due to improper check of IP type while processing DNS server query...
CVE-2022-25671
Denial of service in MODEM due to reachable assertion in Snapdragon Mobile...