CVE-2022-40538 Reachable assertion in Modem

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...

CVE-2022-40538

CVE-2022-40538: A transient DoS due to a reachable assertion in the modem while processing a System Information Block (SIB) with incorrect values from the network. Documented as affecting Qualcomm chipsets/modem and exposed over a network (no user interaction). CVSSv3.1 base score 7.5 (HIGH): Net...

CVE-2022-40536 Improper authentication in Modem

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network...

CVE-2022-40536

CVE-2022-40536 involves a transient Denial of Service caused by an authentication flaw in the modem when handling a plain TLB OTA request from the network. The issue is tied to Qualcomm baseband/modem components and stems from improper authentication inside the device’s networking stack, leading ...

CVE-2022-40533

CVE-2022-40533 describes a transient Denial of Service caused by an untrusted pointer dereference in the core when sending USB QMI requests. The vulnerability affects Qualcomm chipset components (including closed-source parts) and is caused by dereferencing an untrusted pointer in the USB QMI han...

CVE-2022-40533 Untrusted Pointer Dereference in Core

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request...

CVE-2022-40533 Untrusted Pointer Dereference in Core

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request...

CVE-2022-40521 Improper authorization in Modem

Transient DOS due to improper authorization in Modem...

CVE-2022-40521

CVE-2022-40521 is documented with concrete details in connected sources: a Transient Denial of Service due to improper authorization in Qualcomm baseband/modem components. The issue affects Qualcomm basebands and is described as a DoS vulnerability arising from improper authorization, with a Netw...

CVE-2022-33303 Uncontrolled resource consumption in Linux kernel

Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue...

CVE-2022-33303

CVE-2022-33303 describes a transient denial-of-service caused by uncontrolled resource consumption in the Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue. Connected sources consistently cite the Linux kernel/Gunyah message queue as the vulnerable compo...

CVE-2022-33251

CVE-2022-33251 describes a Transient Denial of Service caused by a reachable assertion in the modem triggered by invalid network configuration. The vulnerability is associated with Qualcomm chipset modems and is rated as High (CVSS v3.1: 7.5, Network attack vector, Low attack complexity, No privi...

PT-2023-13822 · Qualcomm · Snapdragon +15

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs due to a reachable assertion in the modem. This happens when the modem processes a...

PT-2023-13262 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS due to a reachable assertion in the Modem, caused by an invalid network configuration. Recommendations: At the moment, there is no information about a...

PT-2023-13810 · Qualcomm · Qualcomm Basebands

Name of the Vulnerable Software and Affected Versions: Qualcomm basebands affected versions not specified Description: The issue is related to a Transient Denial of Service DOS caused by improper authorization in Modem. It affects Qualcomm basebands and has a high security rating. Recommendations...

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

A flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch

A flaw was found in hw. This issue can cause AMD CPUs to transiently execute beyond unconditional direct branches...

hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch

A flaw was found in hw. This issue can cause AMD CPUs to transiently execute beyond unconditional direct branches...

hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch

A flaw was found in hw. This issue can cause AMD CPUs to transiently execute beyond unconditional direct branches...

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

A flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...