Vulnerabilidades

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while selecting the PLMN from SOR failed list.

Cryptographic issue while performing RSA PKCS padding decoding.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Information disclosure while creating MQ channels.

There may be information disclosure during memory re-allocation in TZ Secure OS.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

memory corruption when an invalid firehose patch command is invoked.

Cryptographic issue while parsing RSA keys in COBR format.

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.

Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

Memory corruption while processing key blob passed by the user.

Transient DOS while loading the TA ELF file.

Memory corruption in Core Services while executing the command for removing a single event listener.

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.

Memory corruption in Core while processing control functions.

Transient DOS in Core when DDR memory check is called while DDR is not initialized.