CVE-2022-33270: Time-of-check Time-of-use (TOCTOU) Race Condition

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...

PT-2023-13270 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without checking the size of the input in a modem. This occurs while decoding raw...

CVE-2022-25747: Buffer Over-read

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...

PT-2023-12808 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a buffer over-read. This occurs while the modem is processing packets from a DNS server. Recommendations: At the moment, the...

CVE-2022-25731: Incorrect Calculation of Buffer Size

Information disclosure in modem due to buffer over-read while processing packets from DNS server...

PT-2023-12804 · Qualcomm · 9205 Lte Modem Firmware +34

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves information disclosure in modem data due to an array out of bounds access while handling incoming DNS response packets. This occurs...

CVE-2022-25740: Buffer Copy without Checking Size of Input

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface...

CVE-2022-25678: Buffer Copy without Checking Size of Input

Memory correction in modem due to buffer overwrite during coap connection...

CVE-2023-28613: Integer Overflow or Wraparound

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments...

CVE-2022-25730: Buffer Over-read

Information disclosure in modem due to improper check of IP type while processing DNS server query...

PT-2023-13269 · Qualcomm · 9205 Lte Modem Firmware +18

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to information disclosure due to a buffer over-read in a modem. This occurs when the modem is reading configuration parameters. Recommendations: At the moment, ther...

PT-2023-13249 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to information disclosure due to a buffer over-read in a modem. This occurs when the modem processes an IPv6 packet that contains either a hop-by-hop or destination...

PT-2023-13244 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read that occurs while parsing DNS response packets. Recommendations: At the moment, there is no information about a newer...

CVE-2022-33223: NULL Pointer Dereference

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. Also fixed vulnerabilities in closed-source parts of Android that are developed by third parties, such as Qualcomm, Arm, Imagination Technologies, Unisoc and Mediatek. The vulnerabilities potentially enable a malicious person to execute attacks that...

CVE-2022-33296: Integer Overflow to Buffer Overflow

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message...

CVE-2023-26496

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in the SDP Session Description Protocol...

Memory corruption

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in the SDP Session Description Protocol...

CVE-2023-26498

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corruption can occur due to improper checking of the number of properties while parsing the chatroom attribute in the SDP Session Description...

Memory corruption

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corruption can occur due to improper checking of the number of properties while parsing the chatroom attribute in the SDP Session Description...