stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-33189 (severity: CRITICAL, weakness: CWE-78)
An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.
CVE-2022-33190 (severity: HIGH, weakness: CWE-20)
Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-33191 (severity: MEDIUM, weakness: CWE-79)
Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Chinmoy Paul's Testimonials plugin <= 3.0.1 at WordPress.
CVE-2022-33192 (severity: CRITICAL, weakness: CWE-78)
Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability specifically focuses on the unsafe use of the `WL_SSID` and `WL_SSID_HEX` configuration values in the function at offset `0x1c7d28` of firmware 6.9Z.
CVE-2022-33193 (severity: CRITICAL, weakness: CWE-78)
Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability specifically focuses on the unsafe use of the `WL_WPAPSK` configuration value in the function located at offset `0x1c7d28` of firmware 6.9Z.
CVE-2022-33194 (severity: CRITICAL, weakness: CWE-78)
Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `WL_Key` and `WL_DefaultKeyID` configuration values in the function located at offset `0x1c7d28` of firmware 6.9Z , and even more specifically on the command execution occuring at offset `0x1c7f6c`.
CVE-2022-33195 (severity: CRITICAL, weakness: CWE-78)
Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `WL_DefaultKeyID` in the function located at offset `0x1c7d28` of firmware 6.9Z, and even more specifically on the command execution occuring at offset `0x1c7fac`.
CVE-2022-33196 (severity: MEDIUM, weakness: CWE-276)
Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-33198 (severity: MEDIUM, weakness: CWE-264)
Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress.
CVE-2022-3320 (severity: CRITICAL, weakness: CWE-862)
It was possible to bypass policies configured for Zero Trust Secure Web Gateway by using warp-cli 'set-custom-endpoint' subcommand. Using this command with an unreachable endpoint caused the WARP Client to disconnect and allowed bypassing administrative restrictions on a Zero Trust enrolled endpoint.
CVE-2022-33201 (severity: HIGH, weakness: CWE-352)
Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.
CVE-2022-33202 (severity: HIGH, weakness: CWE-287)
Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative paths or channels for Sensor.
CVE-2022-33203 (severity: HIGH, weakness: CWE-400)
In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access policy with Service Connect agent is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2022-33204 (severity: CRITICAL, weakness: CWE-78)
Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `ssid_hex` HTTP parameter to construct an OS Command at offset `0x19afc0` of the `/root/hpgw` binary included in firmware 6.9Z.
CVE-2022-33205 (severity: CRITICAL, weakness: CWE-78)
Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `wpapsk_hex` HTTP parameter to construct an OS Command at offset `0x19b0ac` of the `/root/hpgw` binary included in firmware 6.9Z.
CVE-2022-33206 (severity: CRITICAL, weakness: CWE-78)
Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `key` and `default_key_id` HTTP parameters to construct an OS Command crafted at offset `0x19b1f4` of the `/root/hpgw` binary included in firmware 6.9Z.
CVE-2022-33207 (severity: CRITICAL, weakness: CWE-78)
Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on a second unsafe use of the `default_key_id` HTTP parameter to construct an OS Command at offset `0x19B234` of the `/root/hpgw` binary included in firmware 6.9Z.
CVE-2022-33208 (severity: HIGH, weakness: CWE-294)
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller.
CVE-2022-33209 (severity: HIGH, weakness: CWE-20)
Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-3321 (severity: HIGH, weakness: CWE-862)
It was possible to bypass Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch on the WARP iOS mobile client by enabling both "Disable for cellular networks" and "Disable for Wi-Fi networks" switches at once in the application settings. Such configuration caused the WARP client to disconnect and allowed the user to bypass restrictions and policies enforced by the Zero Trust platform.
CVE-2022-33210 (severity: HIGH, weakness: CWE-119)
Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto
CVE-2022-33211 (severity: CRITICAL, weakness: CWE-20)
memory corruption in modem due to improper check while calculating size of serialized CoAP message
CVE-2022-33213 (severity: HIGH, weakness: CWE-121)
Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-33214 (severity: HIGH, weakness: CWE-367)
Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-33216 (severity: MEDIUM, weakness: CWE-20)
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.
CVE-2022-33217 (severity: HIGH, weakness: CWE-120)
Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile
CVE-2022-33218 (severity: HIGH, weakness: CWE-787)
Memory corruption in Automotive due to improper input validation.
CVE-2022-33219 (severity: HIGH, weakness: CWE-190)
Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.
CVE-2022-3322 (severity: HIGH, weakness: CWE-862)
Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. Due to insufficient policy verification by WARP iOS client, this feature could be bypassed by using the "Disable WARP" quick action.
CVE-2022-33220 (severity: MEDIUM, weakness: CWE-126)
Information disclosure in Automotive multimedia due to buffer over-read.
CVE-2022-33221 (severity: MEDIUM, weakness: CWE-126)
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
CVE-2022-33222 (severity: HIGH, weakness: CWE-126)
Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
CVE-2022-33223 (severity: HIGH, weakness: CWE-476)
Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.
CVE-2022-33224 (severity: HIGH, weakness: CWE-120)
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
CVE-2022-33225 (severity: HIGH, weakness: CWE-416)
Memory corruption due to use after free in trusted application environment.
CVE-2022-33226 (severity: HIGH, weakness: CWE-120)
Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
CVE-2022-33227 (severity: HIGH, weakness: CWE-415)
Memory corruption in Linux android due to double free while calling unregister provider after register call.
CVE-2022-33228 (severity: HIGH, weakness: CWE-126)
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
CVE-2022-33229 (severity: HIGH, weakness: CWE-126)
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
CVE-2022-3323 (severity: HIGH, weakness: CWE-89)
An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password.
CVE-2022-33230 (severity: HIGH, weakness: CWE-120)
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
CVE-2022-33231 (severity: HIGH, weakness: CWE-415)
Memory corruption due to double free in core while initializing the encryption key.
CVE-2022-33232 (severity: HIGH, weakness: CWE-120)
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.
CVE-2022-33233 (severity: HIGH, weakness: CWE-16)
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-33234 (severity: CRITICAL, weakness: CWE-787)
Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-33235 (severity: HIGH, weakness: CWE-125)
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-33236 (severity: HIGH, weakness: CWE-125)
Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVE-2022-33237 (severity: HIGH, weakness: CWE-125)
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-33238 (severity: HIGH, weakness: CWE-835)
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-33239 (severity: HIGH, weakness: CWE-835)
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-3324 (severity: HIGH, weakness: CWE-121)
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
CVE-2022-33240 (severity: HIGH, weakness: CWE-704)
Memory corruption in Audio due to incorrect type cast during audio use-cases.
CVE-2022-33242 (severity: HIGH, weakness: CWE-287)
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
CVE-2022-33243 (severity: HIGH, weakness: CWE-284)
Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-33244 (severity: HIGH, weakness: CWE-617)
Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout
CVE-2022-33245 (severity: HIGH, weakness: CWE-416)
Memory corruption in WLAN due to use after free
CVE-2022-33246 (severity: MEDIUM, weakness: CWE-823)
Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
CVE-2022-33248 (severity: HIGH, weakness: CWE-680)
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
CVE-2022-3325 (severity: MEDIUM, weakness: CWE-284)
Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. Allowed for editing the approval rules via the API by an unauthorised user.
CVE-2022-33250 (severity: HIGH, weakness: CWE-617)
Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.
CVE-2022-33251 (severity: HIGH, weakness: CWE-617)
Transient DOS due to reachable assertion in Modem because of invalid network configuration.
CVE-2022-33252 (severity: MEDIUM, weakness: CWE-125)
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
CVE-2022-33253 (severity: MEDIUM, weakness: CWE-125)
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
CVE-2022-33254 (severity: HIGH, weakness: CWE-617)
Transient DOS due to reachable assertion in Modem while processing SIB1 Message.
CVE-2022-33255 (severity: MEDIUM, weakness: CWE-125)
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
CVE-2022-33256 (severity: CRITICAL, weakness: CWE-129)
Memory corruption due to improper validation of array index in Multi-mode call processor.
CVE-2022-33257 (severity: HIGH, weakness: CWE-367)
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
CVE-2022-33258 (severity: HIGH, weakness: CWE-126)
Information disclosure due to buffer over-read in modem while reading configuration parameters.
CVE-2022-33259 (severity: CRITICAL, weakness: CWE-120)
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
CVE-2022-3326 (severity: MEDIUM, weakness: CWE-521)
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.
CVE-2022-33260 (severity: HIGH, weakness: CWE-121)
Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.
CVE-2022-33263 (severity: HIGH, weakness: CWE-416)
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
CVE-2022-33264 (severity: HIGH, weakness: CWE-121)
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
CVE-2022-33265 (severity: CRITICAL, weakness: CWE-787)
Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.
CVE-2022-33266 (severity: HIGH, weakness: CWE-190)
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.
CVE-2022-33267 (severity: HIGH, weakness: CWE-119)
Memory corruption in Linux while sending DRM request.
CVE-2022-33268 (severity: HIGH, weakness: CWE-125)
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-33269 (severity: HIGH, weakness: CWE-190)
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.
CVE-2022-3327 (severity: MEDIUM, weakness: CWE-306)
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVE-2022-33270 (severity: MEDIUM, weakness: CWE-367)
Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.
CVE-2022-33271 (severity: HIGH, weakness: CWE-126)
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-33272 (severity: HIGH, weakness: CWE-617)
Transient DOS in modem due to reachable assertion.
CVE-2022-33273 (severity: MEDIUM, weakness: CWE-126)
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
CVE-2022-33274 (severity: HIGH, weakness: CWE-129)
Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.
CVE-2022-33275 (severity: HIGH, weakness: CWE-129)
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2022-33276 (severity: HIGH, weakness: CWE-120)
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
CVE-2022-33277 (severity: HIGH, weakness: CWE-120)
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-33278 (severity: HIGH, weakness: CWE-120)
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
CVE-2022-33279 (severity: CRITICAL, weakness: CWE-121)
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
CVE-2022-3328 (severity: HIGH, weakness: CWE-362)
Race condition in snap-confine's must_mkdir_and_open_with_perms()
CVE-2022-33280 (severity: HIGH, weakness: CWE-824)
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.
CVE-2022-33281 (severity: HIGH, weakness: CWE-129)
Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.
CVE-2022-33282 (severity: HIGH, weakness: CWE-680)
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
CVE-2022-33283 (severity: MEDIUM, weakness: CWE-125)
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
CVE-2022-33284 (severity: MEDIUM, weakness: CWE-125)
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
CVE-2022-33285 (severity: MEDIUM, weakness: CWE-125)
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33286 (severity: MEDIUM, weakness: CWE-125)
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
CVE-2022-33287 (severity: HIGH, weakness: CWE-126)
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
CVE-2022-33288 (severity: HIGH, weakness: CWE-120)
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
CVE-2022-33289 (severity: MEDIUM, weakness: CWE-129)
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33290 (severity: HIGH, weakness: CWE-476)
Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
CVE-2022-33291 (severity: HIGH, weakness: CWE-126)
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
CVE-2022-33292 (severity: HIGH, weakness: CWE-416)
Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.
CVE-2022-33294 (severity: HIGH, weakness: CWE-476)
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.
CVE-2022-33295 (severity: HIGH, weakness: CWE-126)
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
CVE-2022-33296 (severity: HIGH, weakness: CWE-680)
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.