PT-2023-25238 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: There is a possible out of bounds read due to a missing bounds check in the GetConfLevel function of protocolmiscadapter.cpp. This could lead to remote information disclosure with baseband...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from a lack of bounds checking in the ProtocolMiscLceIndAdapter::GetConfLevel method of protocolmiscadapter.cpp, which may result in out-of-bounds reads. This could le...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from a lack of bounds checking in the ProtocolEmbmsGlobalCellIdAdapter::Init method of protocolembmsadapter.cpp, which may result in out-of-bounds reads. This could le...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a Shannon baseband buffer overflow, which may result in out-of-bounds writes. This could lead to remote code execution without additional execution privileges...

PUB-A-286373897

In ProtocolMiscLceIndAdapter::GetConfLevel of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation...

PUB-A-278108845

In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation...

CVE-2023-21517

Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code...

CVE-2023-21517

Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code...

Heap overflow

Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code...

PT-2023-18273 · Samsung · Exynos Baseband

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Jun-2023 Release 1 Description: The issue is a heap out-of-bound write vulnerability that allows a remote attacker to execute arbitrary code. Recommendations: For Exynos baseband versions prior to SMR...

CVE-2023-21517

Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code...

SAMSUNG Mobile devices 缓冲区错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in the SAMSUNG Mobile device SMR Jun-2023 Release 1 version Exynos baseband module, which stems from a heap-based...

CVE-2023-21517

Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code...

CVE-2023-21517

The CVE-2023-21517 entry corresponds to a heap out-of-bounds write in Exynos baseband prior to Samsung SMR Jun-2023 Release 1, enabling a remote attacker to execute arbitrary code. Connected PT-2023-18273 and related sources confirm the affected software is Exynos baseband versions prior to SMR J...

CVE-2023-25188

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP as a BTS administrator removes security hardenings from the Nokia Single RAN BTS baseband unit, the BTS baseband unit diagnostic tool AaShell which is by default disabled allows unauthenticated access from...

CVE-2023-25186

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP as a BTS administrator removes security hardenings from a Nokia Single RAN BTS baseband unit, a directory path traversal in the Nokia BTS baseband unit diagnostic tool AaShell which is by default disabled...

CVE-2023-25186

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP as a BTS administrator removes security hardenings from a Nokia Single RAN BTS baseband unit, a directory path traversal in the Nokia BTS baseband unit diagnostic tool AaShell which is by default disabled...

CVE-2023-25188

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP as a BTS administrator removes security hardenings from the Nokia Single RAN BTS baseband unit, the BTS baseband unit diagnostic tool AaShell which is by default disabled allows unauthenticated access from...

CVE-2023-25186

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP as a BTS administrator removes security hardenings from a Nokia Single RAN BTS baseband unit, a directory path traversal in the Nokia BTS baseband unit diagnostic tool AaShell which is by default disabled...

CVE-2023-25188

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP as a BTS administrator removes security hardenings from the Nokia Single RAN BTS baseband unit, the BTS baseband unit diagnostic tool AaShell which is by default disabled allows unauthenticated access from...