CVE-2024-34673

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...

CVE-2023-32844

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID:...

CVE-2023-24855

Memory corruption in Modem while processing security related configuration before AS Security Exchange...

CVE-2022-44420

In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial of service with no additional execution privileges...

CVE-2025-26784

A vulnerability exists in the NAS component of various Samsung Mobile Processors, Wearable Processors, and Modems (including Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, and Modems 5123, 5300, 5400). The lack of a length check leads to out-of-boun...

CVE-2025-20670

In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with User execution privileges needed. User interaction is needed for exploitation...

CVE-2025-20667

In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-25738

Information disclosure in modem due to buffer over-red while performing checksum of packet received...

CVE-2022-25705

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response...

CVE-2022-25728

Information disclosure in modem due to buffer over-read while processing response from DNS server...

CVE-2022-25737

Information disclosure in modem due to missing NULL check while reading packets received from local network...

CVE-2022-25731

Information disclosure in modem due to buffer over-read while processing packets from DNS server...

CVE-2022-33264

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message...

CVE-2024-20151

A security vulnerability exists in the Modem component of MediaTek Chipsets due to an incorrect bounds check that allows for a possible out-of-bounds write . If a malicious actor has already obtained System privilege , this flaw could lead to local escalation of privilege without requiring user i...

SUSE CVE-2024-7544

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

CVE-2024-7545

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

CVE-2023-52533

A security vulnerability exists in UNISOC Chipsets due to incorrect error handling within the modem-ps-nas-ngmm module. This flaw can lead to undefined behavior , which may result in remote information disclosure without requiring additional execution privileges. No specific versions, remediation...

CVE-2023-21631 Improper Input Validation in Modem

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...

Command injection

In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial of service with no additional execution privileges...

Command injection

In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges...