Missing IPsec Integrity Protection for IMS SIP Signaling in Verizon VoLTE Deployments

Overview VoLTE deployments on Verizon’s IMS network have operated without negotiated SIP integrity protection. In observed test conditions, SIP signaling—including registration, call setup, and messaging—traveled without IPsec ESP encapsulation and without SIP Security Agreement headers, exposing...

EUVD-2017-9277

Malware in sbrugna...

Buffer overflow

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP username, a buffer overflow can occur...

CVE-2017-18142: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP username, a buffer overflow can occur...

PT-2017-3668

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: A buffer overflow issue occurs when processing the IMS SIP username. This can potentially allow a remote attacker to impact the confidentiality, integrity, and availabilit...