CVE-2023-21634 Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM...

CVE-2023-21634

CVE-2023-21634 concerns memory corruption in the Radio Interface Layer (RIL) of Qualcomm chipsets when sending an SMS or writing an SMS to a SIM. The issue is described across sources as a memory corruption vulnerability in the RIL, with potential impact to confidentiality, integrity, and availab...

CVE-2023-42570

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN...

CVE-2023-42570

The issue CVE-2023-42570 is an improper access control vulnerability in Samsung’s KnoxCustomManagerService. It affects Samsung Mobile devices and allows a local attacker to access the device SIM PIN before the SMR Dec-2023 Release 1 patch. Root cause stated as improper access control on the KnoxC...

US Man Jailed 8 Years for SIM Swapping and Apple Support Impersonation

By Waqas In addition to his prison sentence, Amir Hossein Golshan, the culprit, has been ordered to pay $1,218,526 in restitution to his victims. This is a post from HackRead.com Read the original post: US Man Jailed 8 Years for SIM Swapping and Apple Support Impersonation...

CVE-2023-49701

Memory Corruption in SIM management while USIMPhase2init...

CVE-2023-49701

Memory Corruption in SIM management while USIMPhase2init...

Memory corruption

Memory Corruption in SIM management while USIMPhase2init...

CVE-2023-49701 Out-of-bounds access a buffer in SIM management

Memory Corruption in SIM management while USIMPhase2init...

CVE-2023-49701

CVE-2023-49701 describes memory corruption due to out-of-bounds access in SIM management during USIMPhase2init. The NVD entry notes a high-severity memory corruption issue (CVSSv3.1 base 9.8) with network access and no user interaction required, but no exploitation details are provided in the doc...

PT-2023-31304 · Asr +1 · Falcon +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in SIM management during the USIMPhase2init process. No additional details are provided about the estimated number ...

Asrmicro ASR1803 Buffer Error Vulnerability

The Asrmicro ASR1803 is a chip from China's Avantage Technology Asrmicro. A security vulnerability exists in the ASR1803, ASR1806, which originates from an out-of-bounds access to a buffer in SIM management, resulting in a corruption of the SIM management memory during USIMPhase2init...

Scattered Spider ransomware gang falls under government agency scrutiny

As you may have read in our November Ransomware Review, Scattered Spider is a relatively new, albeit dangerous, ransomware gang who made headlines in September for attacking MGM Resorts and Caesar Entertainment. For small security teams, one of the most important findings about the group is their...

FCC Enforces Stronger Rules to Protect Customers Against SIM Swapping Attacks

The U.S. Federal Communications Commission FCC is adopting new rules that aim to protect consumers from cell phone account scams that make it possible for malicious actors to orchestrate SIM-swapping attacks and port-out fraud. "The rules will help protect consumers from scammers who target data...

Scattered Spider

SUMMARY The Federal Bureau of Investigation FBI and Cybersecurity and Infrastructure Security Agency CISA are releasing this joint Cybersecurity Advisory CSA in response to recent activity by Scattered Spider threat actors against the commercial facilities sectors and subsectors. This advisory...

A week in security (November 06 – November 12)

Last week on Malwarebytes Labs: Defeating Little Brother requires a new outlook on privacy: Lock and Code S04E23 Medical research data Advarra stolen after SIM swap Okta breach happened after employee logged into personal Google account Introducing ThreatDown: A new chapter for Malwarebytes...

Medical research data Advarra stolen after SIM swap

Clinical research company Advarra has reportedly been compromised after a SIM swap on one of their executives. SIM swapping, also known as SIM jacking, is the act of illegally taking over a target’s cell phone number. This can be done in a number of ways, but one of the most common methods involv...

CVE-2023-42655

In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2023-42655

In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2023-42645

In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...