CVE-2023-37245: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A buffer overflow vulnerability exists in Huawei...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. The Huawei HarmonyOS and EMUI information disclosure...

CVE-2023-21631

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...

CVE-2023-21629

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...

CVE-2023-28541

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

Double free

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...

Input validation

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...

Memory corruption

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

CVE-2023-28541 Buffer Over-read in WLAN Host

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

CVE-2023-28541

CVE-2023-28541 affects Qualcomm Data Modem (WLAN), with memory corruption during DMA buffer release involving CFR data. CVSSv3.1 base score 7.8 (HIGH) via NVD/Qualcomm metrics; impact includes confidentiality, integrity, and availability. Connected sources confirm the issue under Qualcomm compone...

CVE-2023-21631 Improper Input Validation in Modem

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...

CVE-2023-21631

CVE-2023-21631 describes a weakness in Qualcomm modem firmware due to improper input validation when processing LTE security mode command messages from the network. The vulnerability affects the modem component and can lead to high-impact outcomes (as reflected in CVSS: high/critical with Confide...

CVE-2023-21631 Improper Input Validation in Modem

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...

CVE-2023-21629 Double Free in Modem

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...

CVE-2023-21629 Double Free in Modem

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...

CVE-2023-21629

CVE-2023-21629 refers to memory corruption in Qualcomm closed‑source modem components caused by a double free while parsing PKCS15 SIM files. The CVSSv3.1 base metrics (6.8, MEDIUM) from NVD indicate physical access is required with low attack complexity and no privileges, but high impact to conf...

PT-2023-18294 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a weak configuration in the Modem due to improper input validation when processing LTE security mode command messages received from the network. This can lead to...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a double release issue when parsing PKCS15 sim files, resulting in memory corruption in the Modem...

PT-2023-18292 · Qualcomm · Sd205 Firmware +254

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in a modem, caused by a double free error that occurs while parsing PKCS15 sim files. Recommendations: At the...