Memory corruption

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

Buffer overflow

Memory corruption in modem due to buffer overflow while processing a PPP packet...

Authentication flaw

Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout...

Authentication flaw

Transient DOS due to reachable assertion in Modem while processing SIB1 Message...

Integer overflow

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

Input validation

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

PT-2023-20471 · Samsung · Exynos Auto T5123 +7

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 980 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1080 Samsung Mobile Chipset and Baseband Modem...

CVE-2023-26075

CVE-2023-26075 is an intra-object overflow in the 5G MM message codec of Samsung Exynos modems (Exynos 850/980/1080/1280/2200; Exynos Modem 5123/5300; Exynos Auto T5123) caused by insufficient parameter validation when decoding the Service Area List. This affects Samsung Mobile Chipset and Baseba...

SAMSUNG Mobile Chipset 安全漏洞

SAMSUNG Mobile Chipset is a family of chips from the South Korean company Samsung SAMSUNG. A security vulnerability exists in Samsung Mobile Chipset and Baseband Modem Chipset, which stems from insufficient parameter validation when decoding a list of service areas, which may result in an...

CVE-2022-33272 Reachable assertion in Modem

Transient DOS in modem due to reachable assertion...

CVE-2022-33272

CVE-2022-33272 describes a transient DoS in the modem caused by a reachable assertion. The issue is associated with Qualcomm closed‑source modem components; exploitation details are not provided in the initial document, but CVSSv3.1 indicates Network access, no user interaction, low attack comple...

CVE-2022-33254 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing SIB1 Message...

CVE-2022-33254 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing SIB1 Message...

CVE-2022-33254

CVE-2022-33254 corresponds to a transient Denial of Service in a Modem when processing an SIB1 Message, caused by a reachable assertion. The issue is described as a Modem-level DoS with no user interaction and network attack vector, but the connected documents do not disclose the affected device ...

CVE-2022-33250 Reachable assertion in Modem

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover...

CVE-2022-33250

The CVE-2022-33250 issue is a transient Denial of Service in a Qualcomm modem during NR to LTE handover when the network repeatedly sends invalid message containers. Root cause described as a reachable assertion in the modem code under that handover path. Impact is High for Availability with no c...

CVE-2022-33244 Reachable assertion in Modem

Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout...

CVE-2022-33244

CVE-2022-33244: Transient Denial of Service due to a reachable assertion in the modem during MIB reception and SIB timeout. Documented impact is Availability (CVSS v3.1 base score 7.5). Exploitation status is not provided in the supplied materials. Connected sources consistently describe the issu...