4627 matches found
CVE-2023-37245
CVE-2023-37245: a buffer overflow in the modem pinctrl module can affect the modem’s integrity and availability. Public sources (NVD) show high impact (I/H, A/H) with network access, no user interaction required. Connected documents corroborate this vulnerability on Huawei HarmonyOS ecosystems an...
CVE-2023-37245
Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem...
CVE-2023-37242
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory NVRAM, or facilitate the exploitation of other vulnerabilities...
CVE-2023-37242
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory NVRAM, or facilitate the exploitation of other vulnerabilities...
CVE-2023-37242
CVE-2023-37242 concerns the atcmdserver module in HarmonyOS-related software where commands from the modem can be intercepted, enabling an attacker to rewrite NVRAM and potentially enable further vulnerabilities. Documents confirm the affected component (atcmdserver) and the impact (NVRAM alterat...
CVE-2023-37245: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem...
CVE-2023-37242: Authorization Bypass Through User-Controlled Key
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory NVRAM, or facilitate the exploitation of other vulnerabilities...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. The Huawei HarmonyOS and EMUI information disclosure...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A buffer overflow vulnerability exists in Huawei...
CVE-2023-21631
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...
CVE-2023-28541
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
CVE-2023-21629
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...
Input validation
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...
Memory corruption
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
Double free
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...
CVE-2023-28541 Buffer Over-read in WLAN Host
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
CVE-2023-28541
CVE-2023-28541 affects Qualcomm Data Modem (WLAN), with memory corruption during DMA buffer release involving CFR data. CVSSv3.1 base score 7.8 (HIGH) via NVD/Qualcomm metrics; impact includes confidentiality, integrity, and availability. Connected sources confirm the issue under Qualcomm compone...
CVE-2023-21631
CVE-2023-21631 describes a weakness in Qualcomm modem firmware due to improper input validation when processing LTE security mode command messages from the network. The vulnerability affects the modem component and can lead to high-impact outcomes (as reflected in CVSS: high/critical with Confide...