MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. The security vulnerability in the MediaTek chips stems from an error mishandling issue in the 5G Modem module, which could lead to a system crash...

PT-2023-24184 · Qualcomm · 315 5G Iot Modem Firmware +236

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs while parsing WPA IES when it is passed with a length more than the expected size...

PT-2023-7538 · 5G Modem · 5G Modem

Name of the Vulnerable Software and Affected Versions: 5G Modem affected versions not specified Description: The issue is related to improper error handling in the 5G Modem, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No additional...

PT-2023-7539 · 5G Modem · 5G Modem

Name of the Vulnerable Software and Affected Versions: 5G Modem affected versions not specified Description: The issue is related to improper error handling in the 5G Modem, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No additional...

PT-2023-7537 · Mediatek · Mediatek 5G Modem

Name of the Vulnerable Software and Affected Versions: MediaTek 5G Modem affected versions not specified Description: The issue is related to improper error handling in the 5G Modem, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No addition...

PT-2023-7542 · 5G Modem · 5G Modem

Name of the Vulnerable Software and Affected Versions: 5G Modem affected versions not specified Description: The issue is related to improper error handling in the 5G Modem, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No additional...

PT-2023-7540 · 5G Modem · 5G Modem

Name of the Vulnerable Software and Affected Versions: 5G Modem affected versions not specified Description: The issue is related to improper error handling, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No additional execution privileges a...

PT-2023-7541 · 5G Modem · 5G Modem

Name of the Vulnerable Software and Affected Versions: 5G Modem affected versions not specified Description: The issue is related to improper error handling in the 5G Modem, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No additional...

kernel: bus: mhi: host: Range check CHDBOFF and ERDBOFF

A missing bounds check flaw was found in the Linux kernel's Modem Host Interface bus driver in the channel doorbell offset validation logic. A local user can trigger this issue on systems with MHI devices typically Qualcomm modems or wireless cards by using a device that provides malformed or...

PT-2023-27795 · Samsung · Modem 5123 +15

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem versions Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123 Description: A buffer copy issue,...

Security Vulnerabilities in Some SAMSUNG Products

SAMSUNG Mobile Processor and SAMSUNG Wearable Processor are both products of Samsung, South Korea.SAMSUNG Mobile Processor is a series of mobile processors.SAMSUNG Wearable Processor is a series of wearable processors. SAMSUNG Mobile Processor is a series of mobile processors. A security...

Huawei EMUI Security Vulnerability

Huawei EMUI is an Android-based mobile operating system developed by China's Huawei Huawei. A security vulnerability exists in Huawei EMUI version 11.0.1, which originates from a parameter in the QMI service module that is out of range, resulting in an error when reading file data...

CVE-2023-41111

An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123. Improper handling of a length parameter inconsistency can cause...

CVE-2023-41111

CVE-2023-41111 affects Samsung Mobile Processor, Wearable Processor, Automotive Processor and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, Auto T5123). Root cause: improper handling of a length parameter inconsistency in the RLC...

PT-2023-27794 · Samsung · Auto T5123 +15

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem versions Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123 Description: An issue was...

kernel: bus: mhi: host: Range check CHDBOFF and ERDBOFF

A missing bounds check flaw was found in the Linux kernel's Modem Host Interface bus driver in the channel doorbell offset validation logic. A local user can trigger this issue on systems with MHI devices typically Qualcomm modems or wireless cards by using a device that provides malformed or...

CVE-2023-24852

Memory Corruption in Core due to secure memory access by user while loading modem image...

Memory corruption

Memory Corruption in Core due to secure memory access by user while loading modem image...

CVE-2023-24852 Improper Authentication in Core

Memory Corruption in Core due to secure memory access by user while loading modem image...

CVE-2023-24852

CVE-2023-24852 describes memory corruption in the Core component when a user performs secure memory access during modem image loading. The vulnerability is local and impacts confidentiality, integrity, and availability (per CVSS metrics with LOCAL access, LOW attack complexity, NONE user interact...