CVE-2025-21488 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set...

CVE-2025-21487

CVE-2025-21487 concerns information disclosure in Qualcomm closed‑source components due to incorrect handling of RTP payload length when decoding packets. The root cause is a buffer length mismatch that can lead to over-read and leakage of information from the UE. The vulnerability is categorized...

CVE-2025-21484

CVE-2025-21484 is an information-disclosure issue described as a buffer over-read in the Qualcomm data-network stack, triggered when a User Equipment (UE) decodes and reassembles RTP fragments received over the network. Public descriptions consistently state that the vulnerability causes informat...

CVE-2025-21484 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...

CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...

CVE-2025-52322

An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of service via a crafted Create Session Request message to the SMF PGW-C, using the IP address of a legitimate UE in the PDN Address Allocation PAA field...

PT-2025-36741

Name of the Vulnerable Software and Affected Versions: Open5GS versions prior to 2.7.3 Description: An issue in Open5GS allows a remote attacker to cause a denial of service by sending a crafted Create Session Request message to the SMF PGW-C, utilizing the IP address of a legitimate UE in the PD...

The vulnerability of the Data Network Stack & Connectivity component of Qualcomm’s embedded software allows a hacker to cause memory corruption.

The vulnerability of the Data Network Stack & Connectivity component of Qualcomm’s embedded software lies in the fact that the operation data is written beyond the buffer boundaries in memory during recompilation of NALUs. Exploiting this vulnerability could allow an attacker to cause memory...

EulerOS 2.0 SP11 : nss (EulerOS-SA-2025-1936)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is...

CVE-2025-8800

A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esmhandlepdnconnectivityrequest of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version...

PT-2025-28518

Name of the Vulnerable Software and Affected Versions: Windows GDI affected versions not specified Description: The issue is related to a protection mechanism failure in Windows GDI, allowing an unauthorized attacker to disclose information over a network. This failure enables the attacker to...

CVE-2024-53026 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call...

CVE-2024-53021 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur while processing goodbye RTCP packet from network...

CVE-2024-53021

CVE-2024-53021 is a Qualcomm chipset vulnerability described in connected PT-2025-23579 and PT-2025-23577 as an information-disclosure issue that occurs while processing goodbye RTCP/RTP packets. The root cause is a buffer over-read in the data network stack during decoding/construction of RTCP h...

CVE-2024-53020 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur while decoding the RTP packet with invalid header extension from network...

CVE-2024-53020

CVE-2024-53020 is reported as information disclosure that may occur when decoding RTP packets with an invalid header extension, linked to Qualcomm chipsets’ data/network stack. Connected sources describe a buffer over-read and information disclosure risk in the affected component but do not provi...

CVE-2024-53019

CVE-2024-53019 is a buffer over-read in Qualcomm closed-source components of the Data Network Stack during RTP packet processing. The root cause is an improper RTP header length handling for the number of contributing sources, leading to information disclosure. The CVSSv3.1 base score is 8.2 (Hig...

CVE-2023-21635

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

CVE-2024-45552

CVE-2024-45552 affects Qualcomm components (closed‑source) and involves an information-disclosure condition during a video call when a device resets due to a non-conforming RTCP packet that does not adhere to RFC standards. root cause: RTCP packet non-conformance leading to state reset and data e...

CVE-2024-45552 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesnt adhere to RFC standards...