4634 matches found
CVE-2022-40538: Reachable Assertion
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...
PT-2023-12677 · Qualcomm · 315 5G Iot Modem Firmware +83
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs due to improper validation while processing Reconfiguration messages, leading to an assertion. No information is provided about the...
CVE-2022-40521: Improper Authorization
Transient DOS due to improper authorization in Modem...
CVE-2022-33264: Stack-based Buffer Overflow
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message...
CVE-2022-33251: Reachable Assertion
Transient DOS due to reachable assertion in Modem because of invalid network configuration...
PT-2023-13273 · Qualcomm · 315 5G Iot Modem Firmware +234
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to memory corruption in a modem caused by a stack-based buffer overflow. This occurs while parsing an OTASP Key Generation Request Message. Recommendations: At...
PT-2023-13822 · Qualcomm · Snapdragon +15
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs due to a reachable assertion in the modem. This happens when the modem processes a...
CVE-2022-40536: Improper Authorization
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network...
TP-Link Archer VR1600V Command Injection Vulnerability
The TP-Link Archer VR1600V is a wireless modem from China P&L TP-LINK. The TP-Link Archer VR1600V suffers from a command injection vulnerability that stems from the application failing to properly filter constructed command special characters, commands, etc. An attacker could exploit the...
adreno_set_param Heap Buffer Overflow DoS
The vulnerability of the adrenosetparam function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file of the MSM DRM kernel in the Linux operating system is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2023-7966
Name of the Vulnerable Software and Affected Versions ofono affected versions not specified Description A flaw was found in ofono, an Open Source Telephony on Linux, where a stack overflow bug is triggered within the sms decode address field function during the SMS PDU decoding. This issue can be...
CVE-2023-29092
An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface...
CVE-2022-48389
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
CVE-2022-48389
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
CVE-2022-48380
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
CVE-2022-48380
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
CVE-2022-48381
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
CVE-2022-48381
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...