CVE-2022-25734 – Loop with Unreachable Exit Condition in MODEM
https://notcve.org/view.php?id=CVE-2022-25734
Denial of service in modem due to missing null check while processing IP packets with padding • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVE-2022-25733 – Null Pointer Dereference in MODEM
https://notcve.org/view.php?id=CVE-2022-25733
Denial of service in modem due to null pointer dereference while processing DNS packets • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-476: NULL Pointer Dereference •
CVE-2022-25732 – Buffer Over-read in MODEM
https://notcve.org/view.php?id=CVE-2022-25732
Information disclosure in modem due to buffer over read in dns client due to missing length check • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-25728 – Buffer Over-read in MODEM
https://notcve.org/view.php?id=CVE-2022-25728
Information disclosure in modem due to buffer over-read while processing response from DNS server • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-25695
https://notcve.org/view.php?id=CVE-2022-25695
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Corrupción de la memoria en MODEM debido a una validación incorrecta del índice de matriz mientras se procesan comandos proactivos GSTK en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin • CWE-129: Improper Validation of Array Index •