4796 matches found
PT-2023-14460
Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible missing verification of HashMME value in the Security Mode Command. This could lead to a local denial of service with no additional execution privileges...
PT-2023-22140 · Samsung · Exynos Modem 5123 +3
Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor and Modem versions for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080 Description: An issue was discovered due to improper handling of parameters while binding a network interface, which can cause...
UNISOC Chipsets security vulnerabilities
UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in the UNISOC Chipsets modem module, which stems from a lack of validation in LTE for NAS secure mode command replay attacks...
UNISOC Chipsets Buffer Error Vulnerability
UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...
UNISOC Chipsets data falsification vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets modem module, which stems from a lack of validation of the HashMME value in the Safe Mode command...
PT-2023-15757 · Unknown · Modem Control Device
Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to a local denial of service and requires Syst...
UNISOC Chipsets Buffer Error Vulnerability
UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...
CVE-2022-48389: Out-of-bounds Write
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
PT-2023-15364 · Unknown · Modem Control Device
Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to local denial of service and requires System...
Shannon Baseband fmtp SDP Attribute Memory Corruption
Shannon Baseband: Memory corruption when processing fmtp SDP attribute There is a memory corruption vulnerability that occurs when the baseband modem processes SDP when setting up a call. When an fmtp attribute is parsed, the integer that represents the payload type is copied into an 8-byte buffe...
CVE-2022-40504
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
Authentication flaw
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
CVE-2022-40504
CVE-2022-40504 describes a transient DoS caused by a reachable assertion in the Qualcomm modem when a UE processes a Downlink Data Indication. Connected sources identify the affected component as Qualcomm modem/firmware (e.g., 315 5G IoT Modem) with no public details on a patch or fix in the prov...
CVE-2022-40504 Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
CVE-2022-34144
Transient DOS due to reachable assertion in Modem during OSI decode scheduling...
CVE-2022-40505
Information disclosure due to buffer over-read in Modem while parsing DNS hostname...
CVE-2022-40508
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...
CVE-2022-33304
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet...