CVE-2022-25655 – Buffer copy without checking the size of input in WLAN HAL.
https://notcve.org/view.php?id=CVE-2022-25655
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. • https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2022-40512 – Buffer over-read in WLAN Firmware.
https://notcve.org/view.php?id=CVE-2022-40512
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-33229 – Buffer over-read in Modem
https://notcve.org/view.php?id=CVE-2022-33229
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-25738 – Buffer Over-read in MODEM
https://notcve.org/view.php?id=CVE-2022-25738
Information disclosure in modem due to buffer over-red while performing checksum of packet received • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-25735 – Null Pointer Dereference in MODEM
https://notcve.org/view.php?id=CVE-2022-25735
Denial of service in modem due to missing null check while processing TCP or UDP packets from server • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-476: NULL Pointer Dereference •