182 matches found
samsung-android-lpe
第一部分：任意AT命令执行 CVE-2026-20980 在解锁设备中切换连接模式后，应用处理器AP命令由 atdistributor 管理。 AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor 通过函数 pacmcheckatcmds 验证AT命令 void mainint32t arg1, void arg2 noreturn int32t var21b0 = arg1; data42c170 = SignalHandler; sigemptyset0x42c178; ... if...
ATFuzzer
ATFuzzer 「ATFuzzerによるパンドラの箱を開ける：Androidスマートフォン向けATインターフェースの動的解析」は、第35回ACSAC（2019年）に採択されました。 https://syed-rafiul-hussain.github.io/wp-content/uploads/2019/11/atfuzz.pdf 概要...
Astra Linux – Vulnerability in ofono
oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
CVE-2026-12522
Zephyr RTOS's on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c uses attacker-controlled delimiter positions as strncpy() length into fixed 64/16-byte buffers, causing stack overflow in supervisor context. A rogue base station can trigger crashes or control-flow hijacking. Fix...
PT-2026-78684
The HL7800 cellular modem driver's +CGCONTRDP: response handler on cmd atcmdinfo ipaddr in drivers/modem/vendor standalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is...
CVE-2026-12520
The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...
CVE-2026-12520 Stack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlers
The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...
PT-2026-73233
damn so check this out... basically some crazy smart researchers found out that a bad SIM card can straight up hijack IoT devices like EV chargers and industrial routers using this sneaky old command called RUN AT. if an attacker gets physical access to stick a malicious card in there, it gives...
CVE-2025-69755
An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the atcommand.asp interface...
Exploit for CVE-2026-20980
Part 1: Arbitrary AT command execution CVE-2026-20980 Appl...
CVE-2018-21092
An issue was discovered on Samsung mobile devices with M6.x and N7.x software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 January 2018...
CVE-2022-23728
Attacker can reset the device with AT Command in the process of rebooting the device. The LG ID is LVE-SMP-210011...
EUVD-2021-18583
Malware in sbrugna...
EUVD-2020-6055
Malware in sbrugna...
EUVD-2003-1063
Malware in sbrugna...
EUVD-1999-1390
Malware in sbrugna...
EUVD-2020-6054
Malware in sbrugna...