CVE-2022-33302 – Improper validation of array index in User Identity Module
https://notcve.org/view.php?id=CVE-2022-33302
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-129: Improper Validation of Array Index •
CVE-2022-33298 – Use after free in Modem
https://notcve.org/view.php?id=CVE-2022-33298
Memory corruption due to use after free in Modem while modem initialization. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-416: Use After Free •
CVE-2022-33297 – Buffer overread in Linux Sensors
https://notcve.org/view.php?id=CVE-2022-33297
Information disclosure due to buffer overread in Linux sensors • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-33296 – Integer overflow to buffer overflow in Modem
https://notcve.org/view.php?id=CVE-2022-33296
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-190: Integer Overflow or Wraparound CWE-680: Integer Overflow to Buffer Overflow •
CVE-2022-33291 – Buffer over-read in Modem
https://notcve.org/view.php?id=CVE-2022-33291
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •