3868 matches found
CVE-2023-31096
CVE-2023-31096 affects Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver (AGRSM64.sys) up to version 2.2.100.1, enabling Local Privilege Escalation to SYSTEM via a stack overflow in RTLCopyMemory (IOCTL 0x1b2150). The issue can bypass kernel protections (AV, PPL) and may be used in BYOVD ransomwar...
PT-2023-23152
Name of the Vulnerable Software and Affected Versions Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver versions through 2.2.100.1 Description An issue exists in the Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver AGRSM64.sys that allows for local privilege escalation to SYSTEM privileges. This i...
Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation
Chipmaker Qualcomm has released security updates to address 17 vulnerabilities in various components, while warning that three other zero-days have come under active exploitation. Of the 17 flaws, three are rated Critical, 13 are rated High, and one is rated Medium in severity. "There are...
CVE-2023-28540
Cryptographic issue in Data Modem due to improper authentication during TLS handshake...
CVE-2023-24855
Memory corruption in Modem while processing security related configuration before AS Security Exchange...
CVE-2023-24849
Information Disclosure in data Modem while parsing an FMTP line in an SDP message...
CVE-2023-24848
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value...
CVE-2023-24847
Transient DOS in Modem while allocating DSM items...
CVE-2023-24843
Transient DOS in Modem while triggering a camping on an 5G cell...
CVE-2023-22385
Memory Corruption in Data Modem while making a MO call or MT VOLTE call...
Information disclosure
Transient DOS in Modem while allocating DSM items...
Information disclosure
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value...
Memory corruption
Memory Corruption in Data Modem while making a MO call or MT VOLTE call...
Memory corruption
Memory corruption in Modem while processing security related configuration before AS Security Exchange...
Code injection
Transient DOS in Modem while triggering a camping on an 5G cell...
Authentication flaw
Cryptographic issue in Data Modem due to improper authentication during TLS handshake...
Information disclosure
Information Disclosure in data Modem while parsing an FMTP line in an SDP message...
CVE-2023-28540
CVE-2023-28540 affects Qualcomm Data Modem; root cause is cryptographic issue due to improper authentication during TLS handshake. Public docs (NVD/Red Hat/PRION) describe a cryptographic/authentication flaw with high impact (I=High, C=High) on data confidentiality/integrity. The Qualcomm securit...
