CVE-2023-31114

The CVE affects Samsung Exynos Modem 5123 and 5300 (Shannon RCS). Root cause: incorrect resource transfer between spheres allowing crafted apps to query SIM status. Impact: confidentiality and integrity at High; impact on availability not indicated. Exploitation details are not provided in the do...

CVE-2023-31116

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permission can cause unintended querying of RCS capability via a crafted application...

CVE-2023-31115

The issue (CVE-2023-31115) affects Samsung Exynos Modem versions 5123–5300, specifically the Shannon RCS component. A vulnerability arises from incorrect resource transfer between spheres, which can cause changes to the activation mode of RCS when a crafted application is used. Concrete impact an...

CVE-2022-40536

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network...

CVE-2022-40538

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...

CVE-2022-40521

Transient DOS due to improper authorization in Modem...

CVE-2022-33251

Transient DOS due to reachable assertion in Modem because of invalid network configuration...

CVE-2022-33264

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message...

Authentication flaw

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network...

Authorization

Transient DOS due to improper authorization in Modem...

Stack overflow

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message...

Design/Logic Flaw

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...

Design/Logic Flaw

Transient DOS due to reachable assertion in Modem because of invalid network configuration...

CVE-2022-40538

CVE-2022-40538: A transient DoS due to a reachable assertion in the modem while processing a System Information Block (SIB) with incorrect values from the network. Documented as affecting Qualcomm chipsets/modem and exposed over a network (no user interaction). CVSSv3.1 base score 7.5 (HIGH): Net...

CVE-2022-40538 Reachable assertion in Modem

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...

CVE-2022-40538 Reachable assertion in Modem

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...

CVE-2022-40536 Improper authentication in Modem

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network...

CVE-2022-40536 Improper authentication in Modem

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network...

CVE-2022-40536

CVE-2022-40536 involves a transient Denial of Service caused by an authentication flaw in the modem when handling a plain TLB OTA request from the network. The issue is tied to Qualcomm baseband/modem components and stems from improper authentication inside the device’s networking stack, leading ...

CVE-2022-40521

CVE-2022-40521 is documented with concrete details in connected sources: a Transient Denial of Service due to improper authorization in Qualcomm baseband/modem components. The issue affects Qualcomm basebands and is described as a DoS vulnerability arising from improper authorization, with a Netw...