4634 matches found
CVE-2022-33298 Use after free in Modem
Memory corruption due to use after free in Modem while modem initialization...
CVE-2022-33296
CVE-2022-33296 describes memory corruption due to an integer overflow that becomes a buffer overflow in the Modem when parsing a Traffic Channel Neighbor List Update message. This affects Qualcomm modem components and is documented across multiple sources (NVD, Red Hat, CVE lists). The root cause...
CVE-2022-33296 Integer overflow to buffer overflow in Modem
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message...
CVE-2022-33296 Integer overflow to buffer overflow in Modem
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message...
CVE-2022-33295
CVE-2022-33295 describes an information-disclosure issue in the Modem caused by a buffer over-read while parsing a wms message. Affected: Modem component; root cause is reading beyond the provided buffer length, impacting confidentiality. No explicit exploited details or fixes are stated in the c...
CVE-2022-33295 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...
CVE-2022-33294
CVE-2022-33294 affects Qualcomm modem software where a NULL pointer dereference during processing of an lwm2m registration/update/bootstrap response leads to a transient denial-of-service. The impact is a crash or service disruption on the modem; CVSSv3.1 base score 7.5 (Network, Low attack compl...
CVE-2022-33294 NULL pointer dereference in Modem
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...
CVE-2022-33291
CVE-2022-33291 : Information disclosure due to a buffer over-read in the Modem when receiving an IP header with a malformed length. Connected sources consistently describe “information disclosure” in Modem; no concrete details on affected vendors/models beyond the Modem context, nor on exploitabl...
CVE-2022-33291 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length...
CVE-2022-33291 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length...
CVE-2022-33289
Technical details about CVE-2022-33289 (affected products/versions/fix) are not provided in the supplied connected documents. Monitor for updates and additional authoritative disclosures.
CVE-2022-33289 Improper validation of array index in Modem
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...
CVE-2022-33289 Improper validation of array index in Modem
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...
CVE-2022-33287 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet...
CVE-2022-33287
CVE-2022-33287 describes information disclosure in a Modem due to a buffer over-read while calculating the length of Unfragmented headers in an IPv6 packet. Connected sources reference a Modem/Qualcomm chipset context and reiterate the same description, but none provide concrete affected products...
CVE-2022-33287 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet...
CVE-2022-33270
CVE-2022-33270 describes a transient Denial of Service caused by a time-of-check time-of-use race condition in the Modem while processing an RRC Reconfiguration message. Connected sources corroborate a Modem/QualcommRoot cause with similar wording. The vulnerability impacts the Modem component, l...
CVE-2022-33259
CVE-2022-33259 relates to memory corruption caused by a buffer copy without input size validation in a modem when decoding raw SMS. The vulnerability is described across multiple sources as affecting Qualcomm chipsets/modems, with a CVSS v3.1 base score of 9.8 (NETWORK, LOW complexity, no privile...