Security Vulnerabilities
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672598; Issue ID: MSV-4622.
CVSS Score
7.5
EPSS Score
0.002
Published
2025-11-04
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672601; Issue ID: MSV-4623.
CVSS Score
7.5
EPSS Score
0.002
Published
2025-11-04
In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01671924; Issue ID: MSV-4620.
CVSS Score
7.5
EPSS Score
0.002
Published
2025-11-04
Information disclosure while processing message from client with invalid payload.
CVSS Score
6.1
EPSS Score
0.0
Published
2025-11-04
Memory corruption while processing large input data from a remote source via a communication interface.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-11-04
Memory corruption while accessing a buffer during IOCTL processing.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-11-04
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-11-04
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-11-04
Memory corruption while processing a GP command response.
CVSS Score
8.8
EPSS Score
0.0
Published
2025-11-04
Memory corruption while processing audio streaming operations.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-11-04