CVSS: 7.5EPSS: 0%CPEs: 162EXPL: 0CVE-2022-40536 – Improper authentication in Modem
https://notcve.org/view.php?id=CVE-2022-40536
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network. • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-285: Improper Authorization CWE-287: Improper Authentication •
CVSS: 7.1EPSS: 0%CPEs: 62EXPL: 0CVE-2022-40525 – Information Exposure in Linux Networking Firmware
https://notcve.org/view.php?id=CVE-2022-40525
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis. • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 7.1EPSS: 0%CPEs: 370EXPL: 0CVE-2022-40523 – Information exposure in Kernel
https://notcve.org/view.php?id=CVE-2022-40523
Information disclosure in Kernel due to indirect branch misprediction. • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 8.4EPSS: 0%CPEs: 108EXPL: 0CVE-2022-40522 – Double free in Linux Networking
https://notcve.org/view.php?id=CVE-2022-40522
Memory corruption in Linux Networking due to double free while handling a hyp-assign. • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-415: Double Free •
CVSS: 7.5EPSS: 0%CPEs: 484EXPL: 0CVE-2022-40521 – Improper authorization in Modem
https://notcve.org/view.php?id=CVE-2022-40521
Transient DOS due to improper authorization in Modem • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-285: Improper Authorization CWE-287: Improper Authentication •