PT-2023-7540 · 5G Modem · 5G Modem

Name of the Vulnerable Software and Affected Versions: 5G Modem affected versions not specified Description: The issue is related to improper error handling, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No additional execution privileges a...

CVE-2023-21653

Transient DOS in Modem while processing RRC reconfiguration message...

CVE-2023-21653 Reachable Assertion in Modem

Transient DOS in Modem while processing RRC reconfiguration message...

CVE-2023-21653

CVE-2023-21653 affects the Modem and is described as a Transient Denial of Service while processing an RRC reconfiguration message. The provided documents do not specify the exact vendor, affected model/versions, root cause details, exploit/public in-the-wild info, or a remediation/patch. No expl...

CVE-2023-21653 Reachable Assertion in Modem

Transient DOS in Modem while processing RRC reconfiguration message...

PT-2023-7612 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is related to a software vulnerability in Qualcomm's embedded platforms, specifically concerning insufficient input validation when receiving RRC setup messages...

CVE-2022-33270

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...

Race condition

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...

CVE-2022-33270 Time-of-check time-of-use race condition in Modem

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...

CVE-2022-33270

CVE-2022-33270 describes a transient Denial of Service caused by a time-of-check time-of-use race condition in the Modem while processing an RRC Reconfiguration message. Connected sources corroborate a Modem/QualcommRoot cause with similar wording. The vulnerability impacts the Modem component, l...

CVE-2022-26446

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...

Input validation

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...

PT-2022-17856 · Unknown · Modem 4G Rrc

Name of the Vulnerable Software and Affected Versions: Modem 4G RRC affected versions not specified Description: The issue is related to improper input validation in the Modem 4G RRC, which can cause a system crash. This can lead to a remote denial of service when a specially crafted SIB12 CMAS...

CVE-2022-26446

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...

CVE-2022-26446

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...

CVE-2022-26446

CVE-2022-26446 affects the Modem 4G RRC. The root cause is improper input validation in handling certain SIB12 (CMAS message) input, causing a system crash and remote denial of service. Exploitation is described as possible without additional execution privileges and without user interaction. The...

CVE-2022-22067

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

Memory corruption

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2022-22067

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2022-22067

CVE-2022-22067 affects Qualcomm Snapdragon modems (Auto/Compute/Connectivity/Mobile). The issue is a memory leak during NSA RRC Reconfiguration with an invalid Radio Bearer Config, rooted in the modem component. Documented impact includes high confidentiality, integrity, and availability concerns...