CVE-2025-20794

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20794

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20794

CVE-2025-20794 affects Modem with a vulnerability in input validation that can cause a system crash, leading to remote denial of service when a UE connects to a rogue base station. Exploitation is possible without user interaction and requires adjacent access; no privileges or interaction needed....

PT-2026-1391

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use after free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to achieve local escalation o...

PT-2026-1388

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to an integer overflow. Successful exploitation could allow a malicious actor to gain local system privileges, but requires the attacker to already hav...

PT-2026-1389

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to achieve local escalation o...

PT-2026-1371

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free in display. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User...

PT-2026-1384

Name of the Vulnerable Software and Affected Versions c2ps affected versions not specified Description A memory corruption issue exists in c2ps due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor to gain local system privileges, provided they...

PT-2026-1376

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User interaction is...

PT-2026-1373

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interactio...

PT-2026-1386

Name of the Vulnerable Software and Affected Versions seninf affected versions not specified Description A race condition may lead to memory corruption in seninf. Successful exploitation could allow a malicious actor with System privileges to escalate their privileges locally. User interaction is...

PT-2026-1382

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10315812 Description An out-of-bounds write issue exists in battery due to a missing bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User...

PT-2026-1377

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interaction is not...

PT-2026-1381

Name of the Vulnerable Software and Affected Versions imgsys affected versions not specified Description An out-of-bounds write issue exists in imgsys due to improper input validation. Successful exploitation could allow a malicious actor to gain local system privileges, but requires existing...

PT-2026-1392

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description An out-of-bounds write issue exists in dpe due to an integer overflow. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interactio...

PT-2026-1370

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10184061 Description A memory corruption issue exists in display due to a use after free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to gain local escalation of...

PT-2026-1366

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that may cause a system crash due to improper error handling. This could result in a remote denial of service if a User Equipment UE connects to a malicious base station...

PT-2026-1378

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to incorrect error handling when a user equipment UE connects to a malicious base station controlled by an...

PT-2026-1390

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor to gain local system privileges, provided they alrea...

PT-2026-1369

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10184084 Description A use-after-free issue exists in display due to a race condition. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interaction is not...