CVE-2022-33295: Buffer Over-read

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...

CVE-2022-33291: Buffer Over-read

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length...

CVE-2022-33289: Improper Validation of Array Index

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...

CVE-2022-33270: Time-of-check Time-of-use (TOCTOU) Race Condition

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...

CVE-2022-33287: Buffer Over-read

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet...

CVE-2022-33211: Improper Input Validation

memory corruption in modem due to improper check while calculating size of serialized CoAP message...

CVE-2022-25747: Buffer Over-read

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...

CVE-2022-25739: NULL Pointer Dereference

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call...

CVE-2022-25731: Incorrect Calculation of Buffer Size

Information disclosure in modem due to buffer over-read while processing packets from DNS server...

CVE-2022-25678: Buffer Copy without Checking Size of Input

Memory correction in modem due to buffer overwrite during coap connection...

PT-2023-21847 · Samsung · Exynos Modem 5300 +2

Name of the Vulnerable Software and Affected Versions: Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300 Description: An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor. An integer overflow in IPv4...

PT-2023-13245 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the Modem due to a null pointer dereference. This occurs while processing incoming packets that utilize HTTP chunked encoding...

CVE-2022-33223: NULL Pointer Dereference

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding...

CVE-2022-33296: Integer Overflow to Buffer Overflow

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message...

PT-2023-12804 · Qualcomm · 9205 Lte Modem Firmware +34

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves information disclosure in modem data due to an array out of bounds access while handling incoming DNS response packets. This occurs...

PT-2023-12807 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to an improper check of IP type while processing a DNS server query. Recommendations: At the moment, there is no information...

PT-2023-13299 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read while parsing the wms message. This occurs when the buffer and its length are provided, leading to potential data...

PT-2023-13269 · Qualcomm · 9205 Lte Modem Firmware +18

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to information disclosure due to a buffer over-read in a modem. This occurs when the modem is reading configuration parameters. Recommendations: At the moment, ther...

PT-2023-13244 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read that occurs while parsing DNS response packets. Recommendations: At the moment, there is no information about a newer...

PT-2023-12808 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a buffer over-read. This occurs while the modem is processing packets from a DNS server. Recommendations: At the moment, the...