📄 Piciorgros TMO-100 Configuration Change

Piciorgros TMO-100 allows for an unauthorized configuration change via TFTP. This issue affects versions prior to 4.20. Classification -------------- - CWE-306: Missing Authentication for Critical Function - CWE-940: Improper Verification of Source of a Communication Channel - CWE-200: Exposure o...

CVE-2025-21477 Improper Input Validation in Modem

Transient DOS while processing CCCH data when NW sends data with invalid length...

CVE-2025-21477 Improper Input Validation in Modem

Transient DOS while processing CCCH data when NW sends data with invalid length...

CVE-2025-21477

CVE-2025-21477 is a Qualcomm closed‑source component DoS vulnerability described as improper input validation in the modem when processing CCCH data, triggered by the network sending data with invalid length. The issue results in a transient Denial of Service. Publicly accessible details show the...

CVE-2025-21452 Reachable Assertion in Modem

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

CVE-2025-21452

CVE-2025-21452 describes a transient DoS in Qualcomm modem components on LTE networks, triggered when processing a random-access response with an invalid PDU length. The issue affects the modem’s handling of RAR messages, with a root cause tied to malformed PDU length processing, leading to cessa...

CVE-2025-21452 Reachable Assertion in Modem

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

Pixel Update Bulletin—August 2025Stay organized with collectionsSave and categorize content based on your preferences.

Published August 5, 20225 The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2025-08-05 or later address all issues in this bulletin and all issues in the...

UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for Fraud

The financially motivated threat actor known as UNC2891 has been observed targeting Automatic Teller Machine ATM infrastructure using a 4G-equipped Raspberry Pi as part of a covert attack. The cyber-physical attack involved the adversary leveraging their physical access to install the Raspberry P...

Exploit for Out-of-bounds Read in Openssl

This repository contains exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House. The exploits target various vulnerabilities in different products and services, including: 1. AirWatch MDM solution: The repository contains a file called...

CVE-2025-7921

Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and potentially execute arbitrary code...

CVE-2025-7921

Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and potentially execute arbitrary code...

CVE-2025-7921

CVE-2025-7921 affects Askey modem models (e.g., RTF8207w, RTF8217). The vulnerability is a stack-based buffer overflow in the modem’s handling of input, enabling unauthenticated remote attackers to potentially execute arbitrary code and take control of the device. The CVSS metrics indicate CRITIC...

CVE-2025-7921 ASKEY｜modem - Stack-based Buffer Overflow

Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and potentially execute arbitrary code...

CVE-2025-7921 ASKEY｜modem - Stack-based Buffer Overflow

Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and potentially execute arbitrary code...

PT-2025-30236 · Askey · Askey Modem

Name of the Vulnerable Software and Affected Versions: Askey modem models affected versions not specified Description: Certain modem models developed by Askey have a Stack-based Buffer Overflow vulnerability. This allows unauthenticated remote attackers to control the program's execution flow and...

CVE-2025-7921: Stack-based Buffer Overflow

Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and potentially execute arbitrary code...

CVE-2025-26780

An issue was discovered in L2 in Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400. The lack of a length check leads to a Denial of Service via a malformed PDCP packet...

CVE-2025-47202

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a length check leads to out-of-bounds writes...

CVE-2025-26780

An issue was discovered in L2 in Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400. The lack of a length check leads to a Denial of Service via a malformed PDCP packet...