CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

CVE-2025-20725 affects MediaTek IMS service with an out-of-bounds write due to a missing bounds check. The issue enables remote escalation of privilege when a user equipment connects to a rogue base station; exploitation does not require user interaction. Patch MOLY01671924 (MSV-4620) is referenc...

EUVD-2023-25006

Malicious code in bioql PyPI...

EUVD-2022-25311

Malicious code in bioql PyPI...

EUVD-2025-26509

Malicious code in bioql PyPI...

EUVD-2023-42281

Malicious code in bioql PyPI...

EUVD-2024-18613

Malicious code in bioql PyPI...

EUVD-2022-25314

Malicious code in bioql PyPI...

EUVD-2022-25313

Malicious code in bioql PyPI...

EUVD-2025-16595

Malicious code in bioql PyPI...

EUVD-2023-42282

Malicious code in bioql PyPI...

EUVD-2023-38058

Malicious code in bioql PyPI...

EUVD-2024-18612

Malicious code in bioql PyPI...

CVE-2025-21031

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs...

CVE-2025-21027

Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM...

CVE-2025-21026

Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call...

CVE-2025-21026

Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call...

CVE-2025-21031

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs...