CVE-2024-20003

CVE-2024-20003 affects MediaTek Modem NL1. The issue is an input-validation weakness in the Modem NL1 that can cause a system crash and remote denial of service when an invalid NR RRC Connection Setup message is received. Exploitation requires no user interaction and no extra privileges. A patch ...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from an improper input validation issue in the Modem NL1 module, which may cause a system crash...

CVE-2024-20003: Improper Input Validation

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2024-20004: Improper Input Validation

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from an improper input validation issue in the Modem NL1 module, which may cause a system crash...

PT-2024-18492 · Modem Nl1 · Modem Nl1

Name of the Vulnerable Software and Affected Versions: Modem NL1 affected versions not specified Description: The issue is related to an improper input validation in Modem NL1, which could lead to a system crash and result in a remote denial of service. This can occur if an invalid NR RRC...

PT-2024-18491 · Modem Nl1 · Modem Nl1

Name of the Vulnerable Software and Affected Versions: Modem NL1 affected versions not specified Description: The issue is related to an improper input validation in the Modem NL1, which could lead to a system crash and result in a remote denial of service. This can occur if an invalid NR RRC...

Fedora: Security Advisory for ppp (FEDORA-2024-f0f2f19820)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the microprogrammed software in the Moxa OnCell G3150A-LTE industrial LTE modem, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogrammed software in the Moxa OnCell G3150A-LTE industrial LTE modem lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

[SECURITY] Fedora 38 Update: ppp-2.4.9-10.fc38

The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP Internet Service Provider or other organization over a modem...

PT-2024-12605

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided, but affected chipsets include Tensor Pixel and Exynos basebands. Description The issue is related to the incorrect handling of malformed NAS messages, which can cause a modem crash. The...

CVE-2023-33040

Transient DOS in Data Modem during DTLS handshake...

CVE-2023-33025

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call...

Memory corruption

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call...

Hardcoded credentials

Transient DOS in Data Modem during DTLS handshake...

CVE-2023-33040 Buffer Over-read in Data Modem

Transient DOS in Data Modem during DTLS handshake...

CVE-2023-33040 Buffer Over-read in Data Modem

Transient DOS in Data Modem during DTLS handshake...

CVE-2023-33040

CVE-2023-33040 affects Qualcomm closed‑source Data Modem components and is described as a Transient DoS during the DTLS handshake. The provided documents do not explicitly detail the affected product versions, root cause, vulnerable functions, or a vendor patch version. Public exploit information...

CVE-2023-33025 Buffer Copy without Checking Size of Input in Data Modem

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call...

CVE-2023-33025

CVE-2023-33025 is a memory corruption issue in the Qualcomm Data Modem that occurs when a non-standard SDP body is received during a VOLTE call. The vulnerability affects Qualcomm closed-source Data Modem components and is described as a high-severity fault with potential impact to confidentialit...