91 matches found
CVE-2025-21484 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...
CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...
CVE-2025-52322
An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of service via a crafted Create Session Request message to the SMF PGW-C, using the IP address of a legitimate UE in the PDN Address Allocation PAA field...
PT-2025-36741
Name of the Vulnerable Software and Affected Versions: Open5GS versions prior to 2.7.3 Description: An issue in Open5GS allows a remote attacker to cause a denial of service by sending a crafted Create Session Request message to the SMF PGW-C, utilizing the IP address of a legitimate UE in the PD...
EulerOS 2.0 SP11 : nss (EulerOS-SA-2025-1936)
According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is...
CVE-2025-8800
A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esmhandlepdnconnectivityrequest of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version...
PT-2025-28518 · Microsoft · Windows Gdi +1
Name of the Vulnerable Software and Affected Versions: Windows GDI affected versions not specified Description: The issue is related to a protection mechanism failure in Windows GDI, allowing an unauthorized attacker to disclose information over a network. This failure enables the attacker to...
CVE-2024-53026 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call...
CVE-2024-53021 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while processing goodbye RTCP packet from network...
CVE-2024-53021
CVE-2024-53021 is a Qualcomm chipset vulnerability described in connected PT-2025-23579 and PT-2025-23577 as an information-disclosure issue that occurs while processing goodbye RTCP/RTP packets. The root cause is a buffer over-read in the data network stack during decoding/construction of RTCP h...
CVE-2024-53020
CVE-2024-53020 is reported as information disclosure that may occur when decoding RTP packets with an invalid header extension, linked to Qualcomm chipsets’ data/network stack. Connected sources describe a buffer over-read and information disclosure risk in the affected component but do not provi...
CVE-2024-53020 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with invalid header extension from network...
CVE-2024-53019
CVE-2024-53019 is a buffer over-read in Qualcomm closed-source components of the Data Network Stack during RTP packet processing. The root cause is an improper RTP header length handling for the number of contributing sources, leading to information disclosure. The CVSSv3.1 base score is 8.2 (Hig...
CVE-2023-21635
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...
CVE-2024-45552
CVE-2024-45552 affects Qualcomm components (closed‑source) and involves an information-disclosure condition during a video call when a device resets due to a non-conforming RTCP packet that does not adhere to RFC standards. root cause: RTCP packet non-conformance leading to state reset and data e...
CVE-2024-45552 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesnt adhere to RFC standards...
CVE-2024-45544
CVE-2024-45544 is a memory corruption issue in Qualcomm hardware triggered by IOCTL processing for adding a route entry. Documented as affecting Qualcomm kernel components; vector is Local with Low privileges required, no user interaction. Impact is Confidentiality: Low, Integrity: High, Availabi...
CVE-2024-45544 Use After Free in Data Network Stack & Connectivity
Memory corruption while processing IOCTL calls to add route entry in the HW...