PT-2024-38413

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit...

CVE-2023-33058

Information disclosure in Modem while processing SIB5...

Information disclosure

Information disclosure in Modem while processing SIB5...

CVE-2023-33058

CVE-2023-33058 involves a Buffer Copy Without Checking Size of Input in the Modem, causing information disclosure during SIB5 processing. The vulnerability targets modem components (Qualcomm/closed‑source modem) and stems from improper bounds checking when copying input data. Impact is confidenti...

CVE-2023-33058 Buffer Copy Without Checking Size of Input in Modem

Information disclosure in Modem while processing SIB5...

CVE-2023-33058 Buffer Copy Without Checking Size of Input in Modem

Information disclosure in Modem while processing SIB5...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from information leakage in the modem when processing SIB5...

PT-2024-12386 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue concerns an information disclosure in the Modem while it is processing SIB5. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

PT-2024-13109 · Qualcomm · 315 5G Iot Modem Firmware +277

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a transient Denial of Service DOS that occurs when parsing files with a length equal to 1. No additional details about affected...

CVE-2023-33058: Buffer Over-read

Information disclosure in Modem while processing SIB5...

PT-2024-12394 · Qualcomm · 9206 Lte Modem Firmware +106

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component when processing calibration data returned from the ACDB loader. No information is provided...

CVE-2024-20003

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2024-20004

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

Input validation

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

Input validation

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2024-20004

CVE-2024-20004 affects Modem NL1. The issue is improper input validation in NR RRC Connection Setup handling, potentially causing a remote denial of service with no privileges and no user interaction. Documented base metrics show CVSS v3.1: 7.5 (HIGH) with NETWORK attack vector, LOW attack comple...

CVE-2024-20004

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2024-20004

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2024-20003

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2024-20003

CVE-2024-20003 affects MediaTek Modem NL1. The issue is an input-validation weakness in the Modem NL1 that can cause a system crash and remote denial of service when an invalid NR RRC Connection Setup message is received. Exploitation requires no user interaction and no extra privileges. A patch ...