Snapdragon Wear 1300 Firmware Security Vulnerabilities

CVE-2022-25678

Memory correction in modem due to buffer overwrite during coap connection

CVE-2022-25726

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

CVE-2022-25730

Information disclosure in modem due to improper check of IP type while processing DNS server query

CVE-2022-25731

Information disclosure in modem due to buffer over-read while processing packets from DNS server

CVE-2022-25737

Information disclosure in modem due to missing NULL check while reading packets received from local network

CVE-2022-25739

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

CVE-2022-25740

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

CVE-2022-25745

Memory corruption in modem due to improper input validation while handling the incoming CoAP message

CVE-2022-25747

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

CVE-2022-33211

memory corruption in modem due to improper check while calculating size of serialized CoAP message

CVE-2022-33222

Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

CVE-2022-33223

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.

CVE-2022-33228

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

CVE-2022-33231

Memory corruption due to double free in core while initializing the encryption key.

CVE-2022-33258

Information disclosure due to buffer over-read in modem while reading configuration parameters.

CVE-2022-33259

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

CVE-2022-33294

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.

CVE-2022-33295

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

CVE-2023-21631

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

CVE-2023-28565

Memory corruption in WLAN HAL while handling command streams through WMI interfaces.