PT-2023-15757 · Unknown · Modem Control Device

Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to a local denial of service and requires Syst...

PT-2023-15364 · Unknown · Modem Control Device

Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to local denial of service and requires System...

PT-2023-15766 · Unknown · Modem Control Device

Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to local denial of service and requires System...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

Shannon Baseband fmtp SDP Attribute Memory Corruption

Shannon Baseband: Memory corruption when processing fmtp SDP attribute There is a memory corruption vulnerability that occurs when the baseband modem processes SDP when setting up a call. When an fmtp attribute is parsed, the integer that represents the payload type is copied into an 8-byte buffe...

CVE-2022-40504

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...

Authentication flaw

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...

CVE-2022-40504 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...

CVE-2022-40504

CVE-2022-40504 describes a transient DoS caused by a reachable assertion in the Qualcomm modem when a UE processes a Downlink Data Indication. Connected sources identify the affected component as Qualcomm modem/firmware (e.g., 315 5G IoT Modem) with no public details on a patch or fix in the prov...

CVE-2022-40505

Information disclosure due to buffer over-read in Modem while parsing DNS hostname...

CVE-2022-34144

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

CVE-2022-40508

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

CVE-2022-33304

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet...

CVE-2022-33305

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH...

Cross site scripting

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

Information disclosure

Information disclosure due to buffer over-read in Modem while parsing DNS hostname...

Null pointer dereference

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH...

Null pointer dereference

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet...

Authentication flaw

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

CVE-2022-40508 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...