Known Vulnerabilities
CVE-2023-33066
Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-33018
Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-24849
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-24848
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVE-2022-40521
Transient DOS due to improper authorization in Modem
CVE-2022-33264
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
CVE-2022-33302
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33289
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33213
Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-25694
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM