4457 matches found
PT-2023-14458
Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible missing verification of NAS Security Mode Command Replay Attacks in LTE, which could lead to a local denial of service with no additional execution privileges...
UNISOC Chipsets 缓冲区错误漏洞
UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...
PT-2023-22140 · Samsung · Exynos Modem 5123 +3
Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor and Modem versions for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080 Description: An issue was discovered due to improper handling of parameters while binding a network interface, which can cause...
PT-2023-15766 · Unknown · Modem Control Device
Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to local denial of service and requires System...
UNISOC Chipsets 数据伪造问题漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets modem module, which stems from a lack of validation of the HashMME value in the Safe Mode command...
CVE-2022-44420: Insufficient Verification of Data Authenticity
In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial of service with no additional execution privileges...
CVE-2023-29092: Improper Handling of Exceptional Conditions
An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface...
UNISOC Chipsets 缓冲区错误漏洞
UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...
PT-2023-15364 · Unknown · Modem Control Device
Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to local denial of service and requires System...
PT-2023-15758 · Unknown · Modem Control Device
Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to local denial of service and requires System...
CVE-2023-29092
An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface...
CVE-2022-47485: Out-of-bounds Write
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
CVE-2022-48389: Out-of-bounds Write
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
Shannon Baseband fmtp SDP Attribute Memory Corruption
Shannon Baseband: Memory corruption when processing fmtp SDP attribute There is a memory corruption vulnerability that occurs when the baseband modem processes SDP when setting up a call. When an fmtp attribute is parsed, the integer that represents the payload type is copied into an 8-byte buffe...
CVE-2022-40504
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
Authentication flaw
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
CVE-2022-40504 Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
CVE-2022-40504
CVE-2022-40504 describes a transient DoS caused by a reachable assertion in the Qualcomm modem when a UE processes a Downlink Data Indication. Connected sources identify the affected component as Qualcomm modem/firmware (e.g., 315 5G IoT Modem) with no public details on a patch or fix in the prov...