CVE-2026-48179

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service...

CVE-2026-35495

In IMS stack, improper handling of SIP packets leads to IncorrectAccessControl vulnerability...

CVE-2026-33972

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation...

CVE-2026-33965

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow...

CVE-2026-33965

An attacker may send a malicious IMS message to a target device, which can potentially result in information exposure via the SIP message flow . The vulnerability is associated with CWE-295: Improper Certificate Validation . No specific affected products, versions, or remediation steps are provid...

EUVD-2026-117278

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow...

CVE-2026-33972

An Out of Bound access vulnerability exists in the Exynos modem's IMS stack due to improper validation of specified quantities. While the vulnerability is identified as CWE-1284 , the provided documents do not specify the exact affected version, the specific component involved, the practical impa...

EUVD-2026-117274

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation...

CVE-2026-48179

A vulnerability exists in the Exynos modem's IMS stack due to improper handling of SDP payloads . This flaw leads to a Denial of Service (DoS) condition. The underlying issue is categorized under CWE-1286 (Improper Validation of Syntactic Correctness of Input). No specific software versions, reme...

EUVD-2026-117273

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service...

CVE-2026-35495

The IMS stack contains an Incorrect_Access_Control vulnerability due to the improper handling of SIP packets . The underlying cause is identified as CWE-754 (Improper Check for Unusual or Exceptional Conditions). No specific affected software versions, exploitation details, or remediation steps a...

EUVD-2026-117271

In IMS stack, improper handling of SIP packets leads to IncorrectAccessControl vulnerability...

PT-2026-137347

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow...

PT-2026-137357

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service...

PT-2026-137352

In IMS stack, improper handling of SIP packets leads to Incorrect Access Control vulnerability...

PT-2026-137350

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descriptors in imspcugetcdcuniondesc by iterating through the extra descriptor data. However, it does not verify that the...

PT-2026-135538

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims qos npn module. The w rx aar register function copies the attacker-controlled host field from the SIP Via header into a fixed 46-byte stack buffer without validating its length. An unauthenticated remote attacker can...

PT-2026-135537

Name of the Vulnerable Software and Affected Versions Kamailio versions 6.1.3 through 6.1.4 Description A stack-based buffer overflow occurs in the ims registrar pcscf module. The process contact function copies a port value from the alias parameter of a crafted application/reginfo+xml NOTIFY...