CVE-2023-48406

CVE-2023-48406 affects Google Pixel devices, specifically the Modem OTP component used in Pixel firmware. The public descriptions describe a logic error that can cause a permanent DoS or allow the modem to boot with unverified firmware. This could lead to local escalation of privilege, requiring ...

CVE-2023-48406

there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from the presence of a logic error in the code, where the modem may experience a denial of service...

PT-2023-30826 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a logic error in the code that could lead to a permanent DoS or allow the modem to boot unverified firmware. This could result i...

CVE-2023-33043

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...

CVE-2023-33044

Transient DOS in Data modem while handling TLB control messages from the Network...

CVE-2023-33042

Transient DOS in Modem after RRC Setup message is received...

Memory corruption

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments...

Design/Logic Flaw

Transient DOS in Modem after RRC Setup message is received...

Design/Logic Flaw

Transient DOS in Data modem while handling TLB control messages from the Network...

Design/Logic Flaw

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...

CVE-2023-33044

CVE-2023-33044 affects Qualcomm Data Modem. The issue is a transient Denial of Service in the data modem when handling TLB control messages from the network, caused by incorrect buffer clearance. Impact is DoS with availability loss (CVSS: Network attack, low complexity, no user interaction; Avai...

CVE-2023-33044 Reachable Assertion in Data Modem

Transient DOS in Data modem while handling TLB control messages from the Network...

CVE-2023-33043

The CVE-2023-33043 issue affects Qualcomm embedded platform modem code and causes a transient DoS when a Beam switch request occurs with a non-configured BWP. Root cause per PT-2023-7611 is an incorrect channel division and sub-band switching implementation during a Beam Switching connection, tri...

CVE-2023-33043 Reachable Assertion in Modem

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...

CVE-2023-33042 Improper Input Validation in Modem

Transient DOS in Modem after RRC Setup message is received...

CVE-2023-33042

CVE-2023-33042 describes a DoS in Qualcomm/X55/X60 modem firmware triggered by malformed RRC frames after an RRC Setup message. Connected sources confirm the issue is tied to 5G modem behavior and improper input handling, with exploitation potentially limited to proximity (radio range). Patches h...

CVE-2023-28551

CVE-2023-28551 describes memory corruption in UTILS when the modem processes memory-specific Diag commands with arbitrary address values. The issue affects Qualcomm chipset components (Qualcomm closed-source/Qualcomm components) and is rated with CVSS v3.1: Local access, Low attack complexity, Lo...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a DOS in the data modem when processing TLB control messages from the network...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a denial of service in the modem when a beam-switching request is made using an unconfigured BWP...