92 matches found
CVE-2025-47383
CVE-2025-47383 describes a weak configuration that may cause a cryptographic issue when a VoWiFi call is triggered from UE. Connected records repeat the description and list a CVSS v3.1 base score of 7.2 (HIGH) with NETWORK attack vector, low attack complexity, and high impact on confidentiality,...
CVE-2025-47383: Missing Cryptographic Step
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
EUVD-2023-38061
Malicious code in bioql PyPI...
EUVD-2024-54631
Malicious code in bioql PyPI...
EUVD-2024-19662
Malicious code in bioql PyPI...
EUVD-2025-25107
Malicious code in bioql PyPI...
EUVD-2023-42270
Malicious code in bioql PyPI...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
CVE-2025-31715
CVE-2025-31715 affects the vowifi service. Root cause: improper input validation enabling a command injection. Impact: remote escalation of privilege with no additional privileges required; confidentiality/ integrity/availability all high. CVSS v3.1 base score 9.8 (Network, Low complexity, Privil...
CVE-2025-31715: Undefined Security Weakness
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
PT-2025-33626 · Google +2 · Android +2
Name of the Vulnerable Software and Affected Versions: vowifi affected versions not specified Description: A command injection issue exists in the vowifi service due to improper input validation. This could lead to remote escalation of privilege without requiring additional execution privileges...
CVE-2024-53026
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call...
CVE-2024-53026
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call...
CVE-2024-53026 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call...
CVE-2024-53026
CVE-2024-53026 describes an information-disclosure vulnerability triggered by receiving an invalid RTCP packet during a VoLTE/VoWiFi IMS call. Connected sources associate this with Qualcomm chipsets and note public advisories/patches refer to this issue; however, concrete technical details about ...