4634 matches found
PT-2023-14460
Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible missing verification of HashMME value in the Security Mode Command. This could lead to a local denial of service with no additional execution privileges...
CVE-2023-29092: Improper Handling of Exceptional Conditions
An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface...
CVE-2022-44420: Insufficient Verification of Data Authenticity
In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial of service with no additional execution privileges...
PT-2023-14458
Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible missing verification of NAS Security Mode Command Replay Attacks in LTE, which could lead to a local denial of service with no additional execution privileges...
PT-2023-22140 · Samsung · Exynos Modem 5123 +3
Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor and Modem versions for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080 Description: An issue was discovered due to improper handling of parameters while binding a network interface, which can cause...
UNISOC Chipsets Buffer Error Vulnerability
UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...
CVE-2022-48389: Out-of-bounds Write
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
Shannon Baseband fmtp SDP Attribute Memory Corruption
Shannon Baseband: Memory corruption when processing fmtp SDP attribute There is a memory corruption vulnerability that occurs when the baseband modem processes SDP when setting up a call. When an fmtp attribute is parsed, the integer that represents the payload type is copied into an 8-byte buffe...
CVE-2022-40504
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
Authentication flaw
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
CVE-2022-40504 Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
CVE-2022-40504
CVE-2022-40504 describes a transient DoS caused by a reachable assertion in the Qualcomm modem when a UE processes a Downlink Data Indication. Connected sources identify the affected component as Qualcomm modem/firmware (e.g., 315 5G IoT Modem) with no public details on a patch or fix in the prov...
CVE-2022-40505
Information disclosure due to buffer over-read in Modem while parsing DNS hostname...
CVE-2022-34144
Transient DOS due to reachable assertion in Modem during OSI decode scheduling...
CVE-2022-40508
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...
CVE-2022-33304
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet...
CVE-2022-33305
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH...
Cross site scripting
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...