Memory corruption

Memory Corruption in Data Modem while making a MO call or MT VOLTE call...

Code injection

Transient DOS in Modem while triggering a camping on an 5G cell...

Information disclosure

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value...

Memory corruption

Memory corruption in Modem while processing security related configuration before AS Security Exchange...

Authentication flaw

Cryptographic issue in Data Modem due to improper authentication during TLS handshake...

Information disclosure

Information Disclosure in data Modem while parsing an FMTP line in an SDP message...

CVE-2023-28540

CVE-2023-28540 affects Qualcomm Data Modem; root cause is cryptographic issue due to improper authentication during TLS handshake. Public docs (NVD/Red Hat/PRION) describe a cryptographic/authentication flaw with high impact (I=High, C=High) on data confidentiality/integrity. The Qualcomm securit...

CVE-2023-28540 Improper Authentication in Data Modem

Cryptographic issue in Data Modem due to improper authentication during TLS handshake...

CVE-2023-28540 Improper Authentication in Data Modem

Cryptographic issue in Data Modem due to improper authentication during TLS handshake...

CVE-2023-24855 Use of Out-of-range Pointer Offset in Modem

Memory corruption in Modem while processing security related configuration before AS Security Exchange...

CVE-2023-24855 Use of Out-of-range Pointer Offset in Modem

Memory corruption in Modem while processing security related configuration before AS Security Exchange...

CVE-2023-24855

CVE-2023-24855 is a memory-corruption in Qualcomm’s modem when processing security-related configuration before the AS Security Exchange. Root cause described as an out-of-bounds pointer offset that can lead to remote code execution. Public sources (Qualcomm bulletin, Red Hat/PRION notes) describ...

CVE-2023-24849

CVE-2023-24849 affects Qualcomm closed‑source Data Modem; the issue is Information Disclosure caused by parsing FMTP lines in SDP messages. Root cause: a flaw in the FMTP parsing logic in the Data Modem leading to confidentiality impact (CVE exhibits High impact, with network attack vector and no...

CVE-2023-24849 Buffer Over-read in Data Modem

Information Disclosure in data Modem while parsing an FMTP line in an SDP message...

CVE-2023-24848

CVE-2023-24848 describes an information disclosure in the Qualcomm Data Modem during VoLTE calls when an undefined RTCP FB line value is observed. Public records here confirm the issue title and network-facing context, with CVE-2023-24848 listed in multiple feeds (NVD, CVE list) and linked to Qua...

CVE-2023-24848 Buffer Over-read in Data Modem

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value...

CVE-2023-24847 NULL pointer Dereference in Modem

Transient DOS in Modem while allocating DSM items...

CVE-2023-24847 NULL pointer Dereference in Modem

Transient DOS in Modem while allocating DSM items...

CVE-2023-24847

CVE-2023-24847 describes a transient DoS in the modem when allocating DSM items. The core issue is a crash/hang in the modem component (Qualcomm closed‑source components) leading to denial of service with a CVSSv3.1 base score of 7.5 (Network, low attack complexity, no user interaction). Affected...

CVE-2023-24843

CVE-2023-24843 affects Qualcomm embedded platform modem components. The issue is a transient Denial of Service (DoS) in the modem when triggering a camping on a 5G cell, with CVSSv3.1 metrics indicating network access, low attack complexity, no privileges, no user interaction, and an Availability...