CVE-2022-25678

CVE-2022-25678 relates to memory corruption in Qualcomm modem chipsets caused by a buffer overwrite during a CoAP connection. The vulnerability’s root cause is a buffer overwrite in the modem, with impact described as memory correction. Affects Qualcomm chipsets’ modems; CVSS v3.1 base score 9.8 ...

CVE-2022-25678 Buffer Copy Without Checking Size of Input in MODEM

Memory correction in modem due to buffer overwrite during coap connection...

CVE-2022-25678 Buffer Copy Without Checking Size of Input in MODEM

Memory correction in modem due to buffer overwrite during coap connection...

CVE-2022-33298: Use After Free

Memory corruption due to use after free in Modem while modem initialization...

CVE-2022-33296: Integer Overflow to Buffer Overflow

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message...

CVE-2022-33295: Buffer Over-read

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...

CVE-2022-33294: NULL Pointer Dereference

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...

CVE-2022-33291: Buffer Over-read

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length...

CVE-2022-33259: Buffer Copy without Checking Size of Input

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received...

CVE-2022-25731: Incorrect Calculation of Buffer Size

Information disclosure in modem due to buffer over-read while processing packets from DNS server...

CVE-2022-25730: Buffer Over-read

Information disclosure in modem due to improper check of IP type while processing DNS server query...

CVE-2023-28613: Integer Overflow or Wraparound

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments...

PT-2023-21847 · Samsung · Exynos Modem 5300 +2

Name of the Vulnerable Software and Affected Versions: Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300 Description: An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor. An integer overflow in IPv4...

PT-2023-13296 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the Modem due to a buffer over-read. This occurs when the Modem receives an IP header with a malformed length. Recommendations: At the moment...

PT-2023-13299 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read while parsing the wms message. This occurs when the buffer and its length are provided, leading to potential data...

PT-2023-13249 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to information disclosure due to a buffer over-read in a modem. This occurs when the modem processes an IPv6 packet that contains either a hop-by-hop or destination...

PT-2023-13244 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read that occurs while parsing DNS response packets. Recommendations: At the moment, there is no information about a newer...

PT-2023-12804 · Qualcomm · 9205 Lte Modem Firmware +34

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves information disclosure in modem data due to an array out of bounds access while handling incoming DNS response packets. This occurs...

PT-2023-12813 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a missing NULL check while reading packets received from the local network. Recommendations: At the moment, there is no...

CVE-2022-33270: Time-of-check Time-of-use (TOCTOU) Race Condition

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...