CVE-2023-28582 Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

PT-2024-2302 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Data Modem affected versions not specified Description: The issue is related to memory corruption in the Data Modem during the DTLS handshake, specifically when verifying the...

CVE-2023-28582: Buffer Copy without Checking Size of Input

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

PT-2024-12410 · Qualcomm · 315 5G Iot Modem Firmware +107

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while processing a PDU Release command with a PDU ID parameter that is out of rang...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from memory corruption in the data modem when verifying hello-verify messages during the DTLS handshake...

PT-2024-38411

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit...

PT-2024-38413

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit...

CVE-2023-33058

Information disclosure in Modem while processing SIB5...

Information disclosure

Information disclosure in Modem while processing SIB5...

CVE-2023-33058

CVE-2023-33058 involves a Buffer Copy Without Checking Size of Input in the Modem, causing information disclosure during SIB5 processing. The vulnerability targets modem components (Qualcomm/closed‑source modem) and stems from improper bounds checking when copying input data. Impact is confidenti...

CVE-2023-33058 Buffer Copy Without Checking Size of Input in Modem

Information disclosure in Modem while processing SIB5...

CVE-2023-33058 Buffer Copy Without Checking Size of Input in Modem

Information disclosure in Modem while processing SIB5...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from information leakage in the modem when processing SIB5...

PT-2024-12386 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue concerns an information disclosure in the Modem while it is processing SIB5. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

PT-2024-13109 · Qualcomm · 315 5G Iot Modem Firmware +277

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a transient Denial of Service DOS that occurs when parsing files with a length equal to 1. No additional details about affected...

CVE-2023-33058: Buffer Over-read

Information disclosure in Modem while processing SIB5...

PT-2024-12394 · Qualcomm · 9206 Lte Modem Firmware +106

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component when processing calibration data returned from the ACDB loader. No information is provided...

CVE-2024-20003

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2024-20004

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

Input validation

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...