4460 matches found
CVE-2024-28067
A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle MITM attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext...
CVE-2023-50807
A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G no auth...
CVE-2023-50805
A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem...
CVE-2024-28067
CVE-2024-28067 concerns Samsung Exynos Modem 5300. The available documents describe a vulnerability where a Man-in-the-Middle attacker can downgrade the security mode of packets sent to the victim, enabling plaintext messaging. Affected software is specified as Samsung Exynos Modem 5300; the root...
CVE-2024-28068
A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos 9110, Exynos W920, Exynos...
CVE-2024-28067: Improper Certificate Validation
A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle MITM attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext...
PT-2024-22249 · Samsung · Exynos 9820 +6
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modems versions Exynos 9820 through Exynos 2400 Samsung Mobile Processor, Wearable Processor, and Modems versions Exynos 9110, Exynos W920, Exynos W930 Samsung Mobile Processor, Wearable...
PT-2024-13973 · Samsung · Exynos Modem 5300 +2
Name of the Vulnerable Software and Affected Versions: Samsung Wearable Processor and Modems versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 Description: A vulnerability was discovered that allows an out-of-bounds write in the heap in 2G, which does not require authentication...
CVE-2023-50807: Out-of-bounds Write
A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G no auth...
CVE-2024-20077
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297807; Issue ID: MSV-1482...
CVE-2024-20076
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297806; Issue ID: MSV-1481...
CVE-2024-20076
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297806; Issue ID: MSV-1481...
CVE-2024-20076
A vulnerability exists in the Modem component due to incorrect error handling , which can lead to a system crash. This flaw enables a remote denial of service (DoS) attack that requires no additional execution privileges or user interaction. The vulnerability affects MediaTek chips and is identif...
CVE-2024-20076
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297806; Issue ID: MSV-1481...
CVE-2024-20077
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297807; Issue ID: MSV-1482...
CVE-2024-20077
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297807; Issue ID: MSV-1482...
CVE-2024-20077
A security vulnerability exists in the Modem component of MediaTek chips (and other devices using these components) due to incorrect error handling . This flaw can be exploited to cause a system crash , resulting in a remote denial of service (DoS) without requiring additional execution privilege...
CVE-2024-20076: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297806; Issue ID: MSV-1481...
PT-2024-18561 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to incorrect error handling, which could lead to a system crash and result in a remote denial of service. No additional execution privileges are needed, and user...
MediaTek Chip Security Breach
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which originates from mishandling of errors in the Modem, resulting in a system crash...