Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

TI-2022-19221 CVE-2022-40504 · GHSA-xgf4-6mjg-7hqq

Reachable assertion in Modem

Priority LOW 33

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-05-02 No fix listed CWE-617
TI-2022-19244 CVE-2022-40532 · GHSA-767v-xrqh-x67m

Integer overflow or wraparound in WLAN

Priority LOW 35

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-04-04 No fix listed CWE-190
TI-2022-19220 CVE-2022-40503 · GHSA-h95q-46mc-6g3w

Buffer over-read in Bluetooth Host.

Priority LOW 36

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00406 Published 2023-04-04 No fix listed CWE-126
Priority LOW 33

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2023-04-04 No fix listed CWE-129
TI-2022-14717 CVE-2022-33296 · GHSA-wmfr-hvpj-h75h

Integer overflow to buffer overflow in Modem

Priority LOW 33

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00115 Published 2023-04-04 No fix listed CWE-680
TI-2022-14711 CVE-2022-33289 · GHSA-qgph-86jf-wcq5

Improper validation of array index in Modem

Priority LOW 31

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00186 Published 2023-04-04 No fix listed CWE-129