CVE-2019-8580

Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted...

CVE-2019-8580

CVE-2019-8580 affects Apple AirPort Base Station Firmware (AirPort Extreme/Time Capsule).}}

CVE-2019-8578

CVE-2019-8578 affects Apple’s AirPort Base Station firmware. Description confirms a use-after-free vulnerability in the firmware that could allow arbitrary code execution by a remote attacker. Remediation is provided in firmware updates 7.8.1 and 7.9.1 for AirPort Base Station (802.11n/ac variant...

CVE-2019-8578

A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution...

CVE-2019-8572

A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution...

CVE-2019-8572

The CVE-2019-8572 entry corresponds to a null pointer dereference in Apple AirPort Base Station firmware. Apple’s security updates for 7.8.1 and 7.9.1 address this issue with improved input validation. Public documentation (HT210090/HT210091) links the CVE to AirPort Base Station Firmware updates...

CVE-2019-8575

CVE-2019-8575 affects Apple AirPort Base Station firmware (AirPort Extreme and AirPort Time Capsule). The issue is a data deletion weakness where a factory reset may not delete all user information. Apple’s security updates 7.8.1 and 7.9.1 address this by improving data deletion. Impact is a pote...

CVE-2019-8575

The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may not delete all user information...

CVE-2019-7291

A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack...

CVE-2019-7291

CVE-2019-7291 is a denial-of-service vulnerability in Apple AirPort Base Station Firmware. The issue stems from memory handling in the firmware and could allow a remote attacker in a privileged position to cause a DoS. Fixed in AirPort Base Station Firmware Update 7.8.1 and 7.9.1 (affecting 7.9.x...

New Attack Lets Hackers Decrypt VoLTE Encryption to Spy on Phone Calls

A team of academic researchers—who previously made the headlines earlier this year for uncovering severe security issues in the 4G LTE and 5G networks—today presented a new attack called 'ReVoLTE,' that could let remote attackers break the encryption used by VoLTE voice calls and spy on targeted...

ReVoLTE Attack Allows Hackers to Listen in on Mobile Calls

Researchers have discovered an attack on the Voice over LTE VoLTE mobile communications protocol that can break its encryption and allow attackers to listen in on phone calls. Dubbed ReVoLTE, the attack — detailed by a group of academic researchers from Ruhr University Bochum and New York...

Huawei ChangXiang 8 Plus Input Validation Error Vulnerability

Huawei ChangXiang 8 Plus is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei ChangXiang 8 Plus 9.1.0.136 C00E121R1P6T8, which stems from the program failing to properly handle messages from the base station. An attacker could exploit...

CVE-2020-1837

ChangXiang 8 Plus with versions earlier than 9.1.0.136C00E121R1P6T8 have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal...

CVE-2020-1837

ChangXiang 8 Plus with versions earlier than 9.1.0.136C00E121R1P6T8 have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal...

Race condition

ChangXiang 8 Plus with versions earlier than 9.1.0.136C00E121R1P6T8 have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal...

CVE-2020-1837

ChangXiang 8 Plus with versions earlier than 9.1.0.136C00E121R1P6T8 have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal...

CVE-2019-5302

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

CVE-2019-5303

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

Stack overflow

An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Galaxy Note5 with the Shannon333 chipset. There is a stack-based buffer overflow in the baseband process that is exploitable for remote code execution via a fa...