Search vulnerabilities

Results 65

CVE-2023-32886

In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00730807; Issue ID: MOLY00730807.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Mt2735 Mt6813 Mt6833 and 44 more
CVE-2024-20082

In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01182594; Issue ID: MSV-1529.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Products
Mt2735 Mt2737 Mt6833 and 32 more
CVE-2023-32843

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01130204; Issue ID: MOLY01130204 (MSV-849).

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
Mt2735 Mt2737 Mt6297 and 33 more
CVE-2023-32888

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID: MOLY01161830 (MSV-894).

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Mt2735 Mt6813 Mt6833 and 35 more
CVE-2022-26446

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 (CMAS message), with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883; Issue ID: ALPS07274118.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
Lr12a Lr13 Mt2731 and 53 more
CVE-2024-20069

In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01286330; Issue ID: MSV-1430.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Mt6833 Mt6853 Mt6855 and 14 more
CVE-2024-20070

In modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establishment negotiation. This could lead to remote information disclosure, when weak encryption algorithm is used, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00942482; Issue ID: MSV-1469.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Mt6298 Mt6813 Mt6815 and 37 more
CVE-2024-20094

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Mt2735 Mt6833 Mt6853 and 18 more
CVE-2024-20039

In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Lr12a Lr13 Mt2731 and 77 more
CVE-2024-20150

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01412526; Issue ID: MSV-2018.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Lr12a Lr13 Mt2735 and 77 more
CVE-2023-32874

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161803; Issue ID: MOLY01161803 (MSV-893).

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Products
Lr13 Mt2735 Mt6779 and 42 more
CVE-2024-20004

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01195812 (MSV-985).

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Products
Mt2735 Mt6297 Mt6833 and 18 more
CVE-2024-20003

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01191612 (MSV-981).

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
Mt2735 Mt6297 Mt6833 and 18 more
CVE-2023-32890

In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01183647; Issue ID: MOLY01183647 (MSV-963).

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Lr13 Mt2735 Mt6779 and 42 more
CVE-2023-32846

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID: MOLY01138453 (MSV-861).

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
Mt2735 Mt2737 Mt6297 and 33 more
CVE-2023-32845

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID: MOLY01139296 (MSV-860).

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
Mt2735 Mt2737 Mt6297 and 33 more
CVE-2023-32844

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID: MOLY01130183 (MSV-850).

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
Mt2735 Mt2737 Mt6297 and 33 more
CVE-2023-32842

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01130256; Issue ID: MOLY01130256 (MSV-848).

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
Mt2735 Mt2737 Mt6297 and 33 more
CVE-2023-32841

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID: MOLY01128524 (MSV-846).

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
Mt2735 Mt2737 Mt6297 and 33 more
CVE-2023-32840

In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction may be also needed for exploitation Patch ID: MOLY01138425; Issue ID: MOLY01138425 (MSV-862).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Lr12a Mt2731 Mt2735 and 65 more