MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the Modem IMS Stack module, which may cause a system crash...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the Modem IMS SMS UA module, which may result in out-of-bounds writes...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption in the data modem during a VOLTE call when a non-standard SDP principal is used...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the Modem IMS Call UA module, which may result in out-of-bounds writes...

PT-2024-12382 · Qualcomm · Qualcomm 4 Gen 1 Mobile Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm 4 Gen 1 Mobile Platform affected versions not specified Description: The issue is related to a Transient DOS in the Data Modem during the DTLS handshake. No information is provided about the estimated number of potentially affected...

PT-2024-12375 · Qualcomm · Qualcomm Data Modem

Name of the Vulnerable Software and Affected Versions: Qualcomm Data Modem affected versions not specified Description: The issue involves memory corruption in the Data Modem when a non-standard SDP body is received during a VOLTE call. This can potentially lead to remote attacks when receiving...

PT-2024-12365 · Unknown · Modem Ims Call Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS Call UA affected versions not specified Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

PT-2024-12381 · Qualcomm · 315 5G Iot Modem Firmware +125

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while receiving a message in the Bus Socket Transport Server. No information is provided about the...

PT-2024-12364 · Unknown · Modem Ims Stack

Name of the Vulnerable Software and Affected Versions: Modem IMS Stack affected versions not specified Description: In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User...

PT-2024-12363 · Unknown · Modem Ims Sms Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS SMS UA affected versions not specified Description: In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

PT-2024-12368 · Modem Emm · Modem Emm

Name of the Vulnerable Software and Affected Versions: Modem EMM affected versions not specified Description: The issue is related to a possible system crash in the modem EMM due to improper input validation. This could lead to a remote denial of service with no additional execution privileges...

PT-2024-12366 · Unknown · Modem Ims Call Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS Call UA affected versions not specified Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

SUSE CVE-2023-4232

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodestatusreport function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound...

SUSE CVE-2023-4234

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodesubmitreport function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound...

SUSE CVE-2023-4233

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the smsdecodeaddressfield function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS...

SUSE CVE-2023-4235

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodedeliverreport function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound...

PT-2023-9381

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description A flaw in the oFono interface for working with mobile connectivity is related to a buffer overflow in the decode deliver function during SMS decoding. This issue can be exploited by a remote...

SUSE-SU-2023:4891-1 Security update for ncurses

This update for ncurses fixes the following issues: - CVE-2023-50495: Fixed a segmentation fault via ncwrapentry bsc1218014 - Modify reset command to avoid altering clocal if the terminal uses a modem bsc1201384...

The vulnerability of the data modem in the microprogramming software of Qualcomm-internal chips allows a perpetrator to cause a service failure.

The vulnerability of the data modem component of Qualcomm’s embedded software is related to incorrect cleaning of the TLB buffer during message processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Design/Logic Flaw

there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...