Modem
by Qualcomm
CVEs (68)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-25730 | Hig | 0.53 | 8.2 | 0.00 | Apr 13, 2023 | Information disclosure in modem due to improper check of IP type while processing DNS server query | ||
| CVE-2022-33229 | Hig | 0.53 | 8.2 | 0.00 | Feb 12, 2023 | Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. | ||
| CVE-2022-25738 | Hig | 0.53 | 8.2 | 0.00 | Feb 12, 2023 | Information disclosure in modem due to buffer over-red while performing checksum of packet received | ||
| CVE-2022-25732 | Hig | 0.53 | 8.2 | 0.00 | Feb 12, 2023 | Information disclosure in modem due to buffer over read in dns client due to missing length check | ||
| CVE-2022-25728 | Hig | 0.53 | 8.2 | 0.00 | Feb 12, 2023 | Information disclosure in modem due to buffer over-read while processing response from DNS server | ||
| CVE-2023-28551 | Hig | 0.51 | 7.8 | 0.00 | Dec 5, 2023 | Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. | ||
| CVE-2022-33264 | Hig | 0.51 | 7.9 | 0.00 | Jun 6, 2023 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. | ||
| CVE-2022-25705 | Hig | 0.51 | 7.8 | 0.00 | Mar 10, 2023 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response | ||
| CVE-2022-33233 | Hig | 0.51 | 7.8 | 0.00 | Feb 12, 2023 | Memory corruption due to configuration weakness in modem wile sending command to write protected files. | ||
| CVE-2024-38404 | Hig | 0.49 | 7.5 | 0.00 | Feb 3, 2025 | Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem. | ||
| CVE-2024-23385 | Hig | 0.49 | 7.5 | 0.00 | Nov 4, 2024 | Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. | ||
| CVE-2024-23358 | Hig | 0.49 | 7.5 | 0.00 | Sep 2, 2024 | Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem. | ||
| CVE-2023-33043 | Hig | 0.49 | 7.5 | 0.01 | Dec 5, 2023 | Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. | ||
| CVE-2023-33042 | Hig | 0.49 | 7.5 | 0.01 | Dec 5, 2023 | Transient DOS in Modem after RRC Setup message is received. | ||
| CVE-2023-24847 | Hig | 0.49 | 7.5 | 0.00 | Oct 3, 2023 | Transient DOS in Modem while allocating DSM items. | ||
| CVE-2023-21653 | Hig | 0.49 | 7.5 | 0.00 | Sep 5, 2023 | Transient DOS in Modem while processing RRC reconfiguration message. | ||
| CVE-2023-21646 | Hig | 0.49 | 7.5 | 0.00 | Sep 5, 2023 | Transient DOS in Modem while processing invalid System Information Block 1. | ||
| CVE-2023-21631 | Hig | 0.49 | 7.5 | 0.00 | Jul 4, 2023 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. | ||
| CVE-2022-40538 | Hig | 0.49 | 7.5 | 0.00 | Jun 6, 2023 | Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network. | ||
| CVE-2022-40536 | Hig | 0.49 | 7.5 | 0.00 | Jun 6, 2023 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network. |
- risk 0.53cvss 8.2epss 0.00
Information disclosure in modem due to improper check of IP type while processing DNS server query
- risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
- risk 0.53cvss 8.2epss 0.00
Information disclosure in modem due to buffer over-red while performing checksum of packet received
- risk 0.53cvss 8.2epss 0.00
Information disclosure in modem due to buffer over read in dns client due to missing length check
- risk 0.53cvss 8.2epss 0.00
Information disclosure in modem due to buffer over-read while processing response from DNS server
- risk 0.51cvss 7.8epss 0.00
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
- risk 0.51cvss 7.9epss 0.00
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
- risk 0.51cvss 7.8epss 0.00
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
- risk 0.49cvss 7.5epss 0.00
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
- risk 0.49cvss 7.5epss 0.00
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
- risk 0.49cvss 7.5epss 0.00
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
- risk 0.49cvss 7.5epss 0.01
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
- risk 0.49cvss 7.5epss 0.01
Transient DOS in Modem after RRC Setup message is received.
- risk 0.49cvss 7.5epss 0.00
Transient DOS in Modem while allocating DSM items.
- risk 0.49cvss 7.5epss 0.00
Transient DOS in Modem while processing RRC reconfiguration message.
- risk 0.49cvss 7.5epss 0.00
Transient DOS in Modem while processing invalid System Information Block 1.
- risk 0.49cvss 7.5epss 0.00
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
- risk 0.49cvss 7.5epss 0.00
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.
- risk 0.49cvss 7.5epss 0.00
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
Page 2 of 4