CVE-2024-20151: Out-of-bounds Write

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01399339; Issue ID: MSV-1928...

CVE-2024-20154: Stack-based Buffer Overflow

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Pat...

The vulnerability of DRM/MSM components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/MSM components in the Linux operating system is related to the assignment of the NULL pointer in the msmioctlgemsubmit function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

The vulnerability of the qmi_wwan component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the qmiwwan component in the Linux operating system is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/MSM/devfreq components of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/MSM/devfreq components in Linux operating systems is related to the lack of memory release after the effective lifespan of these components has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-39890

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC Call...

CVE-2024-20132

In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00957388; Issue ID: MSV-1872...

CVE-2024-20133

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871...

CVE-2024-20131

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1873...

CVE-2024-20133

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871...

CVE-2024-20133

A security vulnerability exists in MediaTek Chipsets due to an incorrect bounds check in the Modem component. This flaw can lead to a local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. Remediation is available via Patch ID: MOL...

CVE-2024-20133

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871...

CVE-2024-20132

In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00957388; Issue ID: MSV-1872...

CVE-2024-20132

In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00957388; Issue ID: MSV-1872...

CVE-2024-20132

A security vulnerability exists in MediaTek Chipsets within the Modem component. The flaw is caused by a Modem Task Boundary Check error that results in an out-of-bounds write . This vulnerability could lead to a local escalation of privilege without requiring additional execution privileges or u...

CVE-2024-20131

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1873...

CVE-2024-20131

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1873...

CVE-2024-20131

A security vulnerability exists in the Modem component of MediaTek Chipsets due to an incorrect bounds check (CWE-787: Out-of-bounds Write). This flaw can lead to a local escalation of privilege , requiring System execution privileges for exploitation. Exploitation does not require user interacti...

PT-2024-28461 · Samsung · Samsung Modem +1

Name of the Vulnerable Software and Affected Versions: Samsung Exynos versions 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110 Samsung Modem versions 5123, 5300 Description: The baseband software does not properly check the length specified by the MM Mobility Management module, which can lead to...

CVE-2024-20133: Out-of-bounds Write

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871...