4456 matches found
Information disclosure
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet...
The Bug Report - March 2023 Edition
The Bug Report – March 2023 Edition By Trellix · April 05, 2023 This story was also written by Kasimir Schulz. It really is bussin, though. Why am I here? Welcome back to the Bug Report, Ides of March edition! Last month was highlighted by glimpses into the past, with a historic attack technique...
Integer overflow
An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments...
CVE-2022-33298 Use after free in Modem
Memory corruption due to use after free in Modem while modem initialization...
CVE-2022-33298
CVE-2022-33298 corresponds to a memory corruption issue caused by a use-after-free in the Modem during modem initialization. Multiple connected sources reference a Modem-related vulnerability with memory corruption as the impact; however, the provided documents do not specify affected models, fir...
CVE-2022-33298 Use after free in Modem
Memory corruption due to use after free in Modem while modem initialization...
CVE-2022-33296 Integer overflow to buffer overflow in Modem
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message...
CVE-2022-33296 Integer overflow to buffer overflow in Modem
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message...
CVE-2022-33296
CVE-2022-33296 describes memory corruption due to an integer overflow that becomes a buffer overflow in the Modem when parsing a Traffic Channel Neighbor List Update message. This affects Qualcomm modem components and is documented across multiple sources (NVD, Red Hat, CVE lists). The root cause...
CVE-2022-33295
CVE-2022-33295 describes an information-disclosure issue in the Modem caused by a buffer over-read while parsing a wms message. Affected: Modem component; root cause is reading beyond the provided buffer length, impacting confidentiality. No explicit exploited details or fixes are stated in the c...
CVE-2022-33295 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...
CVE-2022-33294
CVE-2022-33294 affects Qualcomm modem software where a NULL pointer dereference during processing of an lwm2m registration/update/bootstrap response leads to a transient denial-of-service. The impact is a crash or service disruption on the modem; CVSSv3.1 base score 7.5 (Network, Low attack compl...
CVE-2022-33294 NULL pointer dereference in Modem
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...
CVE-2022-33291 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length...
CVE-2022-33291
CVE-2022-33291 : Information disclosure due to a buffer over-read in the Modem when receiving an IP header with a malformed length. Connected sources consistently describe “information disclosure” in Modem; no concrete details on affected vendors/models beyond the Modem context, nor on exploitabl...
CVE-2022-33291 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length...
CVE-2022-33289 Improper validation of array index in Modem
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...
CVE-2022-33289
Technical details about CVE-2022-33289 (affected products/versions/fix) are not provided in the supplied connected documents. Monitor for updates and additional authoritative disclosures.