CVE-2022-25732

Information disclosure in modem due to buffer over read in dns client due to missing length check...

CVE-2022-25692

Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25702

Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25689

Denial of service in Modem due to reachable assertion in Snapdragon Mobile...

CVE-2022-25739

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call...

CVE-2022-25694

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

CVE-2022-34144

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

CVE-2022-33254

Transient DOS due to reachable assertion in Modem while processing SIB1 Message...

CVE-2022-33272

Transient DOS in modem due to reachable assertion...

CVE-2022-33258

Information disclosure due to buffer over-read in modem while reading configuration parameters...

CVE-2022-33294

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...

CVE-2022-33276

Memory corruption due to buffer copy without checking size of input in modem while receiving WMIREQUESTSTATSCMDID command...

CVE-2022-33277

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command...

CVE-2022-33291

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length...

CVE-2022-40504

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...

CVE-2022-40538

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...

CVE-2022-40536

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network...

CVE-2020-11307

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2025-20634

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Pat...

CVE-2025-20634

CVE-2025-20634 concerns MediaTek Modem firmware (notably MT8863 NR16/NR17 and related MT2737-based devices) where a missing bounds check enables an out-of-bounds write. The issue allows remote code execution over the network without user interaction, if the device connects to a rogue base station...