CVE-2022-33229 Buffer over-read in Modem

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets...

CVE-2022-25735 Null Pointer Dereference in MODEM

Denial of service in modem due to missing null check while processing TCP or UDP packets from server...

CVE-2022-25735 Null Pointer Dereference in MODEM

Denial of service in modem due to missing null check while processing TCP or UDP packets from server...

CVE-2022-25734 Loop with Unreachable Exit Condition in MODEM

Denial of service in modem due to missing null check while processing IP packets with padding...

CVE-2022-25734

CVE-2022-25734 concerns a denial-of-service in Qualcomm modem hardware/firmware due to a missing null-check when processing IP packets with padding. Affected component is the modem, with CVSS v3.1 base score 7.5 (Network attack, no user interaction). The available connected sources identify the i...

CVE-2022-25733 Null Pointer Dereference in MODEM

Denial of service in modem due to null pointer dereference while processing DNS packets...

CVE-2022-25733 Null Pointer Dereference in MODEM

Denial of service in modem due to null pointer dereference while processing DNS packets...

openvswitch: Integer Underflow in Organization Specific TLV

A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a data underflow...

openvswitch: Out-of-Bounds Read in Organization Specific TLV

A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a denial of service...

PT-2023-12811 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a denial of service in the modem due to a missing null check while processing IP packets with padding. Recommendations: At the moment, there is no information about a...

PT-2023-12810 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a denial of service in the modem due to a null pointer dereference while processing DNS packets. Recommendations: At the moment, there is no information about a newer...

PT-2023-12812 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a denial of service in the modem due to a missing null check while processing TCP or UDP packets from the server. Recommendations: At the moment, there is no informati...

PT-2023-13250 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in the Modem when using a static array to process IPv4 packets. Recommendations: At the moment, there is no informatio...

Updated sofia-sip packages fix security vulnerability

Missing message length and attributes length checks when it handles STUN packets, leading to controllable heap-over-flow CVE-2023-22741...

MGASA-2023-0040 Updated sofia-sip packages fix security vulnerability

Missing message length and attributes length checks when it handles STUN packets, leading to controllable heap-over-flow CVE-2023-22741...

CVE-2023-24152

A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...

Buffer overflow

Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA010705.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: affected function is lowertransportlayeronseg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17070)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17069)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

CVE-2022-31364

Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA010705.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: affected function is lowertransportlayeronseg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound...