PT-2024-18568 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a possible memory corruption due to a missing bounds check in Modem. This could lead to remote code execution with no additional execution privileges needed. User...

DEBIAN-CVE-2024-7542

oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

UBUNTU-CVE-2024-7538

oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

PT-2024-38408

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to...

PT-2024-18552 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to improper input validation, which can cause a system crash. This can lead to a remote denial of service, and no additional execution privileges are needed for...

ARRIS SURFboard SBG6580 Security Vulnerability

The ARRIS SURFboard SBG6580 is a modem with wireless capabilities from ARRIS. A security vulnerability exists in the ARRIS SURFboard SBG6580 that stems from the default WPA2 security password being easily predictable...

PT-2024-18491 · Modem Nl1 · Modem Nl1

Name of the Vulnerable Software and Affected Versions: Modem NL1 affected versions not specified Description: The issue is related to an improper input validation in the Modem NL1, which could lead to a system crash and result in a remote denial of service. This can occur if an invalid NR RRC...

PT-2024-12363 · Unknown · Modem Ims Sms Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS SMS UA affected versions not specified Description: In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

CVE-2023-32843

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01130204; Issue ID:...

Information disclosure

Transient DOS in Modem while allocating DSM items...

CVE-2023-24855 Use of Out-of-range Pointer Offset in Modem

Memory corruption in Modem while processing security related configuration before AS Security Exchange...

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from a transient DOS...

Information disclosure

Transient DOS in Modem while processing invalid System Information Block 1...

PT-2023-18309 · Qualcomm · Qualcomm Ar8035

Name of the Vulnerable Software and Affected Versions: Qualcomm AR8035 affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the modem when processing an invalid System Information Block 1. This can potentially cause disruptions in service. Ther...

PT-2023-18316 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Modem when processing an RRC reconfiguration message. No information is provided about the estimated number of potentially...

PT-2023-13810 · Qualcomm · Qualcomm Basebands

Name of the Vulnerable Software and Affected Versions: Qualcomm basebands affected versions not specified Description: The issue is related to a Transient Denial of Service DOS caused by improper authorization in Modem. It affects Qualcomm basebands and has a high security rating. Recommendations...

CVE-2022-44419

In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges...

CVE-2022-44419

In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in the UNISOC Chipsets modem module, which stems from a lack of validation in LTE for NAS secure mode command replay attacks...

PT-2023-13342 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS due to a reachable assertion in the Modem during OSI decode scheduling. Recommendations: At the moment, there is no information about a newer version...