Ricoh Company, Ltd. Security Vulnerabilities

CVE-2022-40531

Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID...

CVE-2022-40530

Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization...

CVE-2022-40521

Transient DOS due to improper authorization in...

CVE-2022-40523

Information disclosure in Kernel due to indirect branch...

CVE-2022-40521

Transient DOS due to improper authorization in...

CVE-2022-40508

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not...

CVE-2022-40505

Information disclosure due to buffer over-read in Modem while parsing DNS...

CVE-2022-33305

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in...

CVE-2022-33298

Memory corruption due to use after free in Modem while modem...

CVE-2022-33289

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from...

CVE-2022-33287

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6...

CVE-2022-33282

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video...

CVE-2022-33270

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration...

CVE-2022-33264

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request...

CVE-2022-33264

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request...

CVE-2022-33263

Memory corruption due to use after free in Core when multiple DCI clients register and...

CVE-2022-33258

Information disclosure due to buffer over-read in modem while reading configuration...

CVE-2022-33258

Information disclosure due to buffer over-read in modem while reading configuration...

CVE-2022-33257

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust...

CVE-2022-33256

Memory corruption due to improper validation of array index in Multi-mode call...

CVE-2022-33251

Transient DOS due to reachable assertion in Modem because of invalid network...

CVE-2022-33250

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE...

CVE-2022-33233

Memory corruption due to configuration weakness in modem wile sending command to write protected...

CVE-2022-33232

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered...

CVE-2022-33230

Memory corruption in FM Host due to buffer copy without checking the size of input in FM...

CVE-2022-33228

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in...

CVE-2022-33229

Information disclosure due to buffer over-read in Modem while using static array to process IPv4...

CVE-2022-33220

Information disclosure in Automotive multimedia due to buffer...

CVE-2022-33213

Memory corruption in modem due to buffer overflow while processing a PPP...

CVE-2022-25745

Memory corruption in modem due to improper input validation while handling the incoming CoAP...

CVE-2022-25747

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP...

CVE-2022-25737

Information disclosure in modem due to missing NULL check while reading packets received from local...

CVE-2022-25735

Denial of service in modem due to missing null check while processing TCP or UDP packets from...

CVE-2022-25726

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response...

CVE-2024-26892

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared irq handler should be able to handle the unexpected event after deregistration......

CVE-2022-33233 Configuration weakness in modem

Memory corruption due to configuration weakness in modem wile sending command to write protected...

CVE-2022-25734 Loop with Unreachable Exit Condition in MODEM

Denial of service in modem due to missing null check while processing IP packets with...

CVE-2022-25655 Buffer copy without checking the size of input in WLAN HAL.

Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command...

CVE-2023-21630 Integer Overflow in Multimedia Framework

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx...

CVE-2022-33296 Integer overflow to buffer overflow in Modem

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update...

CVE-2022-33295 Buffer over-read in Modem

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its...

CVE-2022-33294 NULL pointer dereference in Modem

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request...

CVE-2022-33269 Integer overflow or wraparound in Core

Memory corruption due to integer overflow or wraparound in Core while DDR memory...

CVE-2022-33228 Buffer over-read in Modem

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in...

CVE-2023-21642 Improper Access Control in HAB Memory Management

Memory corruption in HAB Memory management due to broad system privileges via physical...

CVE-2022-40508 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not...

CVE-2022-34144 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem during OSI decode...

CVE-2022-33273 Buffer over-read in Trusted Execution Environment

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report...

CVE-2023-21659 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while processing frames with missing header...

CVE-2022-40529 Improper access control in Kernel

Memory corruption due to improper access control in kernel while processing a mapping request from root...