4634 matches found
CVE-2022-33291: Buffer Over-read
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length...
PT-2023-12815 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a denial of service in the modem, caused by a missing null check while processing an ipv6 packet received during an ECM call. Recommendations: At the moment, there is ...
PT-2023-13296 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the Modem due to a buffer over-read. This occurs when the Modem receives an IP header with a malformed length. Recommendations: At the moment...
PT-2023-13294 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: Memory corruption occurs due to improper validation of an array index when a malformed APDU is sent from a card. Recommendations: At the moment, there is no information about a newer version...
PT-2023-13276 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a time-of-check time-of-use race condition in the Modem when processing RRC Reconfiguration messages, which can cause a transient denial of service. Recommendations: A...
PT-2023-13238 · Qualcomm · 9205 Lte Modem Firmware +18
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to memory corruption in a modem. This occurs due to an improper check while calculating the size of a serialized CoAP message, leading to potential exploitation...
CVE-2023-28613: Integer Overflow or Wraparound
An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments...
CVE-2022-33294: NULL Pointer Dereference
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...
PT-2023-13270 · Qualcomm · Snapdragon +12
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without checking the size of the input in a modem. This occurs while decoding raw...
PT-2023-12817 · Qualcomm · 9205 Lte Modem Firmware +7
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue is related to memory corruption in a modem, caused by improper input validation when handling incoming CoAP messages. Recommendations: At the moment, there is no information...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. Also fixed vulnerabilities in closed-source parts of Android that are developed by third parties, such as Qualcomm, Arm, Imagination Technologies, Unisoc and Mediatek. The vulnerabilities potentially enable a malicious person to execute attacks that...
PT-2023-12804 · Qualcomm · 9205 Lte Modem Firmware +34
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves information disclosure in modem data due to an array out of bounds access while handling incoming DNS response packets. This occurs...
CVE-2022-33295: Buffer Over-read
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...
CVE-2022-33287: Buffer Over-read
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet...
CVE-2022-33270: Time-of-check Time-of-use (TOCTOU) Race Condition
Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...
CVE-2022-33259: Buffer Copy without Checking Size of Input
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received...
CVE-2022-25747: Buffer Over-read
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...
CVE-2022-25745: Always-Incorrect Control Flow Implementation
Memory corruption in modem due to improper input validation while handling the incoming CoAP message...
CVE-2022-25740: Buffer Copy without Checking Size of Input
Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface...