CVE-2022-33259 – Buffer copy without checking the size of input in Modem
https://notcve.org/view.php?id=CVE-2022-33259
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2022-33258 – Buffer over-read in Modem
https://notcve.org/view.php?id=CVE-2022-33258
Information disclosure due to buffer over-read in modem while reading configuration parameters. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-33231 – Double free in Core
https://notcve.org/view.php?id=CVE-2022-33231
Memory corruption due to double free in core while initializing the encryption key. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-415: Double Free •
CVE-2022-33228 – Buffer over-read in Modem
https://notcve.org/view.php?id=CVE-2022-33228
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-33223 – Null pointer dereference in Modem
https://notcve.org/view.php?id=CVE-2022-33223
Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-476: NULL Pointer Dereference •