CVE-2022-33291

CVE-2022-33291 : Information disclosure due to a buffer over-read in the Modem when receiving an IP header with a malformed length. Connected sources consistently describe “information disclosure” in Modem; no concrete details on affected vendors/models beyond the Modem context, nor on exploitabl...

CVE-2022-33289 Improper validation of array index in Modem

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...

CVE-2022-33289

Technical details about CVE-2022-33289 (affected products/versions/fix) are not provided in the supplied connected documents. Monitor for updates and additional authoritative disclosures.

CVE-2022-33289 Improper validation of array index in Modem

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...

CVE-2022-33287 Buffer over-read in Modem

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet...

CVE-2022-33287 Buffer over-read in Modem

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet...

CVE-2022-33287

CVE-2022-33287 describes information disclosure in a Modem due to a buffer over-read while calculating the length of Unfragmented headers in an IPv6 packet. Connected sources reference a Modem/Qualcomm chipset context and reiterate the same description, but none provide concrete affected products...

CVE-2022-33270

CVE-2022-33270 describes a transient Denial of Service caused by a time-of-check time-of-use race condition in the Modem while processing an RRC Reconfiguration message. Connected sources corroborate a Modem/QualcommRoot cause with similar wording. The vulnerability impacts the Modem component, l...

CVE-2022-33259

CVE-2022-33259 relates to memory corruption caused by a buffer copy without input size validation in a modem when decoding raw SMS. The vulnerability is described across multiple sources as affecting Qualcomm chipsets/modems, with a CVSS v3.1 base score of 9.8 (NETWORK, LOW complexity, no privile...

CVE-2022-33259 Buffer copy without checking the size of input in Modem

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received...

CVE-2022-33258 Buffer over-read in Modem

Information disclosure due to buffer over-read in modem while reading configuration parameters...

CVE-2022-33258

CVE-2022-33258 affects Qualcomm modem firmware; the vulnerability is an information disclosure caused by a buffer over-read when reading configuration parameters in the modem. Documented in multiple sources as a buffer over-read leading to leakage of data; exploitation status is not detailed in t...

CVE-2022-33258 Buffer over-read in Modem

Information disclosure due to buffer over-read in modem while reading configuration parameters...

CVE-2022-33228 Buffer over-read in Modem

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header...

CVE-2022-33228 Buffer over-read in Modem

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header...

CVE-2022-33228

CVE-2022-33228 affects Qualcomm modem chipsets. The vulnerability is an information disclosure caused by a buffer over-read when the modem processes an IPv6 header containing hop-by-hop or destination options. Documented impact is Confidentiality High; other impacts (Integrity, Availability) are ...

CVE-2022-33223 Null pointer dereference in Modem

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding...

CVE-2022-33223

CVE-2022-33223 describes a transient Denial of Service in the Modem caused by a null pointer dereference while processing incoming packets using HTTP chunked encoding. The CVSS v3.1 vector (NETWORK, LOW AC, NONE PR, UI, S=U) yields a base score of 7.5 (HIGH). The vulnerability is associated with ...

CVE-2022-33222 Buffer over-read in Modem

Information disclosure due to buffer over-read while parsing DNS response packets in Modem...

CVE-2022-33222

CVE-2022-33222 is a vulnerability described across multiple sources as an information disclosure caused by a buffer over-read when parsing DNS response packets in a Modem. The effect is a confidentiality impact (high) with no integrity/availability impact per the primary NVD entry, though CVSS ve...