4644 matches found
CVE-2023-37242
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory NVRAM, or facilitate the exploitation of other vulnerabilities...
CVE-2023-37242
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory NVRAM, or facilitate the exploitation of other vulnerabilities...
CVE-2023-37245: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem...
CVE-2023-37242: Authorization Bypass Through User-Controlled Key
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory NVRAM, or facilitate the exploitation of other vulnerabilities...
Huawei HarmonyOS security vulnerabilities
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A buffer overflow vulnerability exists in Huawei...
Huawei HarmonyOS security vulnerabilities
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. The Huawei HarmonyOS and EMUI information disclosure...
CVE-2023-28541
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
CVE-2023-21629
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...
CVE-2023-21631
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...
Input validation
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...
Memory corruption
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
Double free
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...
CVE-2023-28541
CVE-2023-28541 affects Qualcomm Data Modem (WLAN), with memory corruption during DMA buffer release involving CFR data. CVSSv3.1 base score 7.8 (HIGH) via NVD/Qualcomm metrics; impact includes confidentiality, integrity, and availability. Connected sources confirm the issue under Qualcomm compone...
CVE-2023-28541 Buffer Over-read in WLAN Host
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
CVE-2023-21631
CVE-2023-21631 describes a weakness in Qualcomm modem firmware due to improper input validation when processing LTE security mode command messages from the network. The vulnerability affects the modem component and can lead to high-impact outcomes (as reflected in CVSS: high/critical with Confide...
CVE-2023-21631 Improper Input Validation in Modem
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...
CVE-2023-21631 Improper Input Validation in Modem
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...
CVE-2023-21629 Double Free in Modem
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...
CVE-2023-21629
CVE-2023-21629 refers to memory corruption in Qualcomm closed‑source modem components caused by a double free while parsing PKCS15 SIM files. The CVSSv3.1 base metrics (6.8, MEDIUM) from NVD indicate physical access is required with low attack complexity and no privileges, but high impact to conf...