CVE-2022-33289: Improper Validation of Array Index

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...

CVE-2022-33259: Buffer Copy without Checking Size of Input

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received...

CVE-2022-33296: Integer Overflow to Buffer Overflow

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message...

PT-2023-21847 · Samsung · Exynos Modem 5300 +2

Name of the Vulnerable Software and Affected Versions: Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300 Description: An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor. An integer overflow in IPv4...

CVE-2022-25739: NULL Pointer Dereference

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call...

PT-2023-12815 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a denial of service in the modem, caused by a missing null check while processing an ipv6 packet received during an ECM call. Recommendations: At the moment, there is ...

CVE-2022-33298: Use After Free

Memory corruption due to use after free in Modem while modem initialization...

PT-2023-12817 · Qualcomm · 9205 Lte Modem Firmware +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue is related to memory corruption in a modem, caused by improper input validation when handling incoming CoAP messages. Recommendations: At the moment, there is no information...

PT-2023-13299 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read while parsing the wms message. This occurs when the buffer and its length are provided, leading to potential data...

PT-2023-13296 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the Modem due to a buffer over-read. This occurs when the Modem receives an IP header with a malformed length. Recommendations: At the moment...

CVE-2022-33295: Buffer Over-read

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...

PT-2023-13294 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: Memory corruption occurs due to improper validation of an array index when a malformed APDU is sent from a card. Recommendations: At the moment, there is no information about a newer version...

PT-2023-13276 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a time-of-check time-of-use race condition in the Modem when processing RRC Reconfiguration messages, which can cause a transient denial of service. Recommendations: A...

PT-2023-13238 · Qualcomm · 9205 Lte Modem Firmware +18

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to memory corruption in a modem. This occurs due to an improper check while calculating the size of a serialized CoAP message, leading to potential exploitation...

PT-2023-13302 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to memory corruption caused by a use-after-free error in the Modem during the modem initialization process. Recommendations: At the moment, there is no information about ...

PT-2023-12813 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a missing NULL check while reading packets received from the local network. Recommendations: At the moment, there is no...

CVE-2022-25745: Always-Incorrect Control Flow Implementation

Memory corruption in modem due to improper input validation while handling the incoming CoAP message...

CVE-2022-33294: NULL Pointer Dereference

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...

CVE-2022-33270: Time-of-check Time-of-use (TOCTOU) Race Condition

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...

CVE-2022-25737: Use of Uninitialized Variable

Information disclosure in modem due to missing NULL check while reading packets received from local network...