4632 matches found
CVE-2025-20647: NULL Pointer Dereference
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
PT-2025-35541
Name of the Vulnerable Software and Affected Versions Qualcomm Multi-Mode Call Processor affected versions not specified Qualcomm Snapdragon chips affected versions not specified Description A memory corruption issue exists when selecting the PLMN Public Land Mobile Network from the SOR Serving a...
MediaTek Modem 安全漏洞
MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A security vulnerability exists in MediaTek Modem that stems from mishandling of errors and could lead to a remote denial of service...
PT-2025-9261
Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a missing bounds check, which could lead to a system crash and result in a remote denial of service. This can occur if a UE connects to a rogue base station controlled b...
PUB-A-303771271
there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
DrayTek Vigor 165 安全漏洞
The DrayTek Vigor 165 is a VDSL2 35b hypervector modem/router from China DrayTek DrayTek. A security vulnerability exists in the DrayTek Vigor 165 that stems from passwords being stored in plaintext...
PT-2025-7541
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for this issue Description A memory corruption issue exists due to incorrect handling of control transfer buffer sizes in the usb: cdc-acm module. When the first fragment is...
CVE-2025-20634
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Pat...
CVE-2024-38404
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...
CVE-2022-25738
Information disclosure in modem due to buffer over-red while performing checksum of packet received...
CVE-2022-25747
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...
CVE-2022-25729
Memory corruption in modem due to improper length check while copying into memory...
CVE-2022-25730
Information disclosure in modem due to improper check of IP type while processing DNS server query...
CVE-2022-25671
Denial of service in MODEM due to reachable assertion in Snapdragon Mobile...
CVE-2022-25734
Denial of service in modem due to missing null check while processing IP packets with padding...
CVE-2022-25691
Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile...
CVE-2022-25673
Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile...
CVE-2022-25709
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg...