CVSS: 8.2EPSS: 0%CPEs: 24EXPL: 0CVE-2022-25747 – Buffer Over-read in MODEM
https://notcve.org/view.php?id=CVE-2022-25747
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVSS: 9.8EPSS: 0%CPEs: 10EXPL: 0CVE-2022-25745 – Always Incorrect Control Flow Implementation in MODEM
https://notcve.org/view.php?id=CVE-2022-25745
Memory corruption in modem due to improper input validation while handling the incoming CoAP message • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-670: Always-Incorrect Control Flow Implementation •
CVSS: 9.8EPSS: 0%CPEs: 24EXPL: 0CVE-2022-25740 – Buffer Copy Without Checking Size of Input in MODEM
https://notcve.org/view.php?id=CVE-2022-25740
Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 52EXPL: 0CVE-2022-25739 – Null Point Dereference in MODEM
https://notcve.org/view.php?id=CVE-2022-25739
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 24EXPL: 0CVE-2022-25737 – Use of Uninitialized Variable in MODEM
https://notcve.org/view.php?id=CVE-2022-25737
Information disclosure in modem due to missing NULL check while reading packets received from local network • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-457: Use of Uninitialized Variable CWE-908: Use of Uninitialized Resource •