CVE-2023-32874

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161803; Issue ID: MOLY01161803 MSV-893...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the Modem IMS SMS UA module, which may result in out-of-bounds writes...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the Modem IMS Stack module, which may result in out-of-bounds writes...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption in the data modem during a VOLTE call when a non-standard SDP principal is used...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the Modem IMS Stack module, which may cause a system crash...

PT-2024-12382 · Qualcomm · Qualcomm 4 Gen 1 Mobile Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm 4 Gen 1 Mobile Platform affected versions not specified Description: The issue is related to a Transient DOS in the Data Modem during the DTLS handshake. No information is provided about the estimated number of potentially affected...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets contain a security vulnerability that originates from a denial of service vulnerability in the data modem during the DTLS handshake...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from improper validation of inputs to the modem EMM module, which could result in a system crash...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the Modem IMS Call UA module, which may result in out-of-bounds writes...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the Modem IMS Call UA module, which may result in out-of-bounds writes...

PT-2024-12368 · Modem Emm · Modem Emm

Name of the Vulnerable Software and Affected Versions: Modem EMM affected versions not specified Description: The issue is related to a possible system crash in the modem EMM due to improper input validation. This could lead to a remote denial of service with no additional execution privileges...

PT-2024-12375 · Qualcomm · Qualcomm Data Modem

Name of the Vulnerable Software and Affected Versions: Qualcomm Data Modem affected versions not specified Description: The issue involves memory corruption in the Data Modem when a non-standard SDP body is received during a VOLTE call. This can potentially lead to remote attacks when receiving...

PT-2024-12364 · Unknown · Modem Ims Stack

Name of the Vulnerable Software and Affected Versions: Modem IMS Stack affected versions not specified Description: In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User...

PT-2024-12381 · Qualcomm · 315 5G Iot Modem Firmware +125

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while receiving a message in the Bus Socket Transport Server. No information is provided about the...

PT-2024-12363 · Unknown · Modem Ims Sms Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS SMS UA affected versions not specified Description: In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

PT-2024-12365 · Unknown · Modem Ims Call Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS Call UA affected versions not specified Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

PT-2024-12366 · Unknown · Modem Ims Call Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS Call UA affected versions not specified Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

SUSE CVE-2023-4233

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the smsdecodeaddressfield function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS...

SUSE CVE-2023-4234

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodesubmitreport function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound...

SUSE CVE-2023-4232

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodestatusreport function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound...