CVE-2024-20039

In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215...

CVE-2024-20039

A vulnerability exists in the modem protocol of MediaTek chips due to a missing bounds check, leading to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. The issue is addresse...

PT-2024-18524 · Mediatek · Mt2731 +5

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a modem protocol, where a missing bounds check can lead to an out of bounds write. This could result in remote code execution...

CVE-2024-20039: Out-of-bounds Write

In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215...

MediaTek 芯片 安全漏洞

The MediaTek chips are a variety of MediaTek chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the modem protocol, which could result in out-of-bounds writes...

NETGEAR DGND4000 Elevation of Privilege Vulnerability

The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...

ARRIS SURFboard SBG6580 Security Vulnerability

The ARRIS SURFboard SBG6580 is a modem with wireless capabilities from ARRIS. A security vulnerability exists in the ARRIS SURFboard SBG6580 that stems from the default WPA2 security password being easily predictable...

CVE-2023-28582

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

Memory corruption

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

CVE-2023-33086 Improper Release of Memory Before Removing Last Reference in Data Modem

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers...

CVE-2023-33084 Improper Release of Memory Before Removing Last Reference in Data Modem

Transient DOS while processing IE fragments from server during DTLS handshake...

CVE-2023-33084 Improper Release of Memory Before Removing Last Reference in Data Modem

Transient DOS while processing IE fragments from server during DTLS handshake...

CVE-2023-28582

CVE-2023-28582 is a memory corruption vulnerability in Qualcomm Data Modem triggered during the DTLS handshake when verifying the hello-verify message. Root cause: a buffer copy without checking input size. By sending crafted DTLS messages over the network, a remote attacker could potentially exe...

CVE-2023-28582 Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

CVE-2023-28582 Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

PT-2024-2302 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Data Modem affected versions not specified Description: The issue is related to memory corruption in the Data Modem during the DTLS handshake, specifically when verifying the...

CVE-2023-28582: Buffer Copy without Checking Size of Input

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

PT-2024-12410 · Qualcomm · 315 5G Iot Modem Firmware +107

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while processing a PDU Release command with a PDU ID parameter that is out of rang...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from memory corruption in the data modem when verifying hello-verify messages during the DTLS handshake...

PT-2024-38411

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit...