CVE-2025-20703

Summary: CVE-2025-20703 affects the Modem component, where an incorrect bounds check enables an out-of-bounds read. This can cause a remote denial of service if a UA connects to a rogue base station, with no user interaction or privileges required. Impact (as stated): remote DoS; availability imp...

CVE-2025-20703

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20708

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20708

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20708

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

MediaTek Modem 缓冲区错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek Modem that stems from a lack of boundary checking leading to out-of-bounds writes, which could lead to remote elevation of privilege...

MediaTek Modem 资源管理错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A resource management error vulnerability exists in MediaTek Modem that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

PT-2025-35540

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description A memory corruption issue exists when a device receives an RTP packet from the network during the reassembly of NALUs. This occurs due to a buffer overflow in the Data Network Sta...

MediaTek Modem 资源管理错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A resource management error vulnerability exists in MediaTek Modem that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

PT-2025-35449

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: A possible out of bounds read exists due to an incorrect bounds check. This could lead to remote denial of service if a User Equipment UE connects to a rogue base station controlled by an...

MediaTek Modem 缓冲区错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek Modem that stems from an incorrect boundary check resulting in an out-of-bounds read, which could lead to a remote denial of service...

MediaTek Modem 资源管理错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A resource management error vulnerability exists in MediaTek Modem that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

PT-2025-35454

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: A possible out of bounds write exists due to an incorrect bounds check. This could lead to remote escalation of privilege if a User Equipment UE connects to a rogue base station controlled by...

MediaTek Modem 缓冲区错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek Modem that stems from incorrect boundary checking leading to out-of-bounds writes, which could lead to remote elevation of privilege...

CVE-2025-29525

DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel...

Linux Distros Unpatched Vulnerability : CVE-2024-7538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected...

D-Link DSL-7740C ping function command injection vulnerability

The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C ping function. The vulnerability stems from the ping function failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...

PT-2025-44139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the tty subsystem, specifically in the n gsm component. The issue arises from the potential to block the input queue while waiting for a Modem...

New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

A team of academics has devised a novel attack that can be used to downgrade a 5G connection to a lower generation without relying on a rogue base station gNB. The attack, per the ASSET Automated Systems SEcuriTy Research Group at the Singapore University of Technology and Design SUTD, relies on ...

CVE-2025-25736

Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge ADB pre-installed /mnt/c3platpersistent/opt/platform-tools/adb and enabled by default, allowing unauthenticated root shell access to the cellular modem via the...