144 matches found
CVE-2025-50518
A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library. This flaw is caused by improper memory handling after a Packet Data Unit (PDU) object is freed, which can lead to memory corruption or the execution of arbitrary code . While the su...
CVE-2025-50518
A use-after-free vulnerability exists in the coapdeletepdulkd function within coappdu.c of the libcoap library. This issue occurs due to improper handling of memory after the freeing of a PDU object, leading to potential memory corruption or the possibility of executing arbitrary code. NOTE: this...
CVE-2023-21648
Memory corruption in RIL while trying to send apdu packet...
CVE-2022-39881
Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a post-release reuse when Bluetooth L2CAP reorganizes the SDU, which could lead to memory corruption...
Magma 代码问题漏洞
Magma is an open source software platform from Magma Open Source. An open, flexible and scalable mobile core network solution for network operators. A code issue vulnerability exists in Magma 1.8.0 and prior versions, which stems from the fact that the absence of the mandatory NASPDU field in the...
OpenAirInterface CN5G AMF 安全漏洞
OpenAirInterface CN5G AMF is an OpenAirInterface open source application. A security vulnerability exists in OpenAirInterface CN5G AMF v2.0.0 and earlier versions, which stems from the presence of a buffer overflow that allows an attacker to trigger a denial of service DoS by setting up a respons...
PT-2024-34550 · Open5Gs · Open5Gs
Name of the Vulnerable Software and Affected Versions: Open 5GS version 2.7.1 Description: The issue allows a remote attacker to cause a denial of service via the Network Function Virtualizations NFVs such as the User Plane Function UPF and the Session Management Function SMF, during the Packet...
OpenSC 安全漏洞
OpenSC is an open source smart card tool and middleware from OpenSC Open Source. A security vulnerability exists in OpenSC that stems from the system's mishandling of responses to specially constructed APDUs, which could result in incorrect access to the initialized portion of a partially populat...
kernel: wifi: cfg80211: check A-MSDU format more carefully
A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When parsing an Aggregate MAC Service Data Unit A-MSDU, insufficient validation of subframe headers can cause an out-of-bounds memory read. An attacker within wireless network range transmitting specially crafted frames could...
DEBIAN-CVE-2024-7544
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...
PT-2024-37522 · Conduit · Conduit
Name of the Vulnerable Software and Affected Versions: Conduit affected versions not specified Description: The issue is related to incomplete cleanup when performing redactions in Conduit. This allows an attacker to determine whether certain strings were present in the PDU before redaction...
OFono decode_deliver_report() Code Execution
The vulnerability of the decodedeliverreport function in the OFono mobile phone stack is related to the execution of an operation outside the buffer in memory when sending SMS messages in the PDU format. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2024-4791
A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the component Application Protocol Data Unit. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit h...
CVE-2024-4791: Improper Resource Shutdown or Release
A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the component Application Protocol Data Unit. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit h...
Contemporary Controls BASrouter BACnet BASRT-B 安全漏洞
Contemporary Controls BASrouter BACnet BASRT-B is a router from Contemporary Controls. A security vulnerability exists in Contemporary Controls BASrouter BACnet BASRT-B version 2.7.2, which originates from the component Application Protocol Data Unit that causes a denial of service...
CVE-2024-4791 Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service
A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the component Application Protocol Data Unit. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit h...
PT-2024-32885 · Contemporary Control System · Basrouter Bacnet Basrt-B
Name of the Vulnerable Software and Affected Versions: Contemporary Control System BASrouter BACnet BASRT-B version 2.7.2 Description: A critical vulnerability was found in the Application Protocol Data Unit component, which can be exploited remotely, leading to denial of service. The exploit has...
Linux NVMe Kernel Driver Heap Buffer Overflow DoS
The vulnerability of the nvmettcpbuildpduiovec function in the drivers/nvme/target/tcp.c file of the Linux NVMe kernel driver is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that results from a denial of service when processing a PDU Release command with an out-of-range parameter PDU ID...