1946 matches found
CVE-2025-20704
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-20704
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-20704
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-20704
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-20704
CVE-2025-20704 affects MediaTek’s Modem component. The issue is an out-of-bounds write caused by a missing bounds check in the Modem stack, enabling remote escalation of privilege when a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation is reported to re...
CVE-2025-20708
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-20708
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-20708
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-20708
The CVE-2025-20708 entry concerns MediaTek’s Modem (MOLY) with an out-of-bounds write caused by an incorrect bounds check. According to the sources, this could enable remote escalation of privilege when a user equipment (UE) connects to a rogue base station, with no extra execution privileges or ...
PT-2025-35454
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: A possible out of bounds write exists due to an incorrect bounds check. This could lead to remote escalation of privilege if a User Equipment UE connects to a rogue base station controlled by...
MediaTek Modem 缓冲区错误漏洞
MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek Modem that stems from a lack of boundary checking leading to out-of-bounds writes, which could lead to remote elevation of privilege...
MediaTek Modem 缓冲区错误漏洞
MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek Modem that stems from incorrect boundary checking leading to out-of-bounds writes, which could lead to remote elevation of privilege...
ASB-A-255601934
In multiple locations, there is a possible way to impersonate and MitM a device across session by only compromising one session key due to an insecure protocol design on Bluetooth Legacy Secure Connection LSC. This could lead to remote escalation of privilege with no additional execution privileg...
CVE-2025-52184
Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...
CVE-2025-52184
Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...
CVE-2025-52184
Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...
CVE-2025-53795
Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-53795
Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...