CVE-2023-49699

CVE-2023-49699 describes memory corruption due to an out-of-bounds/buffer access in the IMS when calling the VoLTE Streamingmedia Interface. Connected sources consistently identify the IMS as the affected component and attribute the issue to memory corruption with impacts aligning to the CVSS met...

CVE-2023-49699 Out-of-bounds access a buffer in IMS

Memory Corruption in IMS while calling VoLTE Streamingmedia Interface...

CVE-2023-49699: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory Corruption in IMS while calling VoLTE Streamingmedia Interface...

CVE-2023-24848

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value...

CVE-2023-22385

Memory Corruption in Data Modem while making a MO call or MT VOLTE call...

Memory corruption

Memory Corruption in Data Modem while making a MO call or MT VOLTE call...

Information disclosure

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value...

CVE-2023-24848 Buffer Over-read in Data Modem

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value...

CVE-2023-24848

CVE-2023-24848 describes an information disclosure in the Qualcomm Data Modem during VoLTE calls when an undefined RTCP FB line value is observed. Public records here confirm the issue title and network-facing context, with CVE-2023-24848 listed in multiple feeds (NVD, CVE list) and linked to Qua...

CVE-2023-22385

CVE-2023-22385 is a memory corruption issue in the Qualcomm Data Modem that can occur during MO or MT VOLTE calls. Public documents consistently describe the affected component as the Data Modem and attribute the vulnerability to memory corruption in that subsystem. The CVE appears in multiple fe...

CVE-2023-22385: Buffer Over-read

Memory Corruption in Data Modem while making a MO call or MT VOLTE call...

CVE-2023-24848: Buffer Over-read

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value...

Google reveals 18 chip vulnerabilities threatening mobile, wearables, vehicles

Googles Project Zero is warning of multiple significant vulnerabilities found across many models of mobile devices including Samsung Galaxy, Google Pixel, Vivo, and several forms of wearable and vehicles using certain types of components. Between late 2022 and early 2023, Project Zero reported 18...

Google Uncovers 18 Severe Security Vulnerabilities in Samsung Exynos Chips

Google is calling attention to a set of severe security flaws in Samsung's Exynos chips, some of which could be exploited remotely to completely compromise a phone without requiring any user interaction. The 18 zero-day vulnerabilities affect a wide range of Android smartphones from Samsung, Vivo...

volte-tel.com Cross Site Scripting vulnerability OBB-3013384

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google Android Information Disclosure Vulnerability (CNVD-2022-32846)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to obtain some VoLTE sensitive information and manage VoLTE calls...

CVE-2021-39635

imsex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps No phone permissions can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634...

Code injection

imsex is a vendor system service used to manage VoLTE in unisoc devices?But it does not verify the caller's permissions?so that normal apps No phone permissions can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634...

CVE-2021-39635

CVE-2021-39635 concerns Unisoc’s ims_ex, a vendor system service used to manage VoLTE on Android devices. The root cause is that ims_ex does not verify the caller’s permissions, allowing normal apps without phone permissions to access VoLTE‑sensitive information and to manage VoLTE calls. Various...

CVE-2021-39635

imsex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps No phone permissions can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634...