CVE-2025-21487 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...

CVE-2025-21487 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...

CVE-2025-21484 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...

CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...

CVE-2025-21483

CVE-2025-21483 affects Qualcomm Snapdragon embedded platform firmware in the Data Network Stack & Connectivity component. It stems from a buffer overflow during RTP packet reassembly of NAL units, leading to memory corruption in the UE. The CVSS 3.1/3.1 vector is Network, Privileges=None, User in...

CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...

PT-2025-39270

Name of the Vulnerable Software and Affected Versions versions affected versions not specified Description An information disclosure issue exists while decoding Real-time Transport Protocol RTP packet headers received by a User Equipment UE from the network when the padding bit is set...

The vulnerability of the Data Network Stack & Connectivity component of Qualcomm’s embedded software allows a hacker to cause memory corruption.

The vulnerability of the Data Network Stack & Connectivity component of Qualcomm’s embedded software lies in the fact that the operation data is written beyond the buffer boundaries in memory during recompilation of NALUs. Exploiting this vulnerability could allow an attacker to cause memory...

CVE-2025-54995

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions...

CVE-2025-54995 Asterisk remotely exploitable leak of RTP UDP ports and internal resources

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions...

CVE-2025-54995 Asterisk remotely exploitable leak of RTP UDP ports and internal resources

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions...

PT-2025-35096

Name of the Vulnerable Software and Affected Versions: Asterisk versions prior to 18.26.4 Asterisk versions prior to 18.9-cert17 Description: Asterisk, an open source private branch exchange and telephony toolkit, is susceptible to resource exhaustion due to a lack of session termination. This ca...

CVE-2025-55634

The Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime (firmware v3.0.0.4662_2503122283 ) is vulnerable to a Denial of Service (DoS) attack due to incorrect access control in the RTMP server settings . An unauthorized attacker can trigger this by initiating a large number of simultaneous f...

CVE-2025-55634

Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to cause a Denial of Service DoS via initiating a large number of simultaneous ffmpeg-based stream pushes...

Linux Distros Unpatched Vulnerability : CVE-2017-14099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In res/resrtpasterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x...

MultiFuzz: a Dense Retrieval-Based Multi-Agent System for Network Protocol Fuzzing

Traditional protocol fuzzing techniques, such as those employed by AFL-based systems, often lack effectiveness due to a limited semantic understanding of complex protocol grammars and rigid seed mutation strategies. Recent works, such as ChatAFL, have integrated Large Language Models LLMs to guid...

UBUNTU-CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

Payload和form 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an information disclosure when decoding RTP packet payloads...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through handling of RTP packets in the NewPacket function of packetfactory.go. An attacker can trigger a panic in the system by sending malformed RTP packets containing a padding size...

Pion Interceptor 安全漏洞

Pion Interceptor is a Pion open source pluggable RTP/RTCP processor for building real-time communications. A security vulnerability exists in Pion Interceptor versions v0.1.36 through v0.1.38, which stems from an RTP packet factory error that could cause the service to crash...