Vulnerabilidades

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while selecting the PLMN from SOR failed list.

Cryptographic issue while performing RSA PKCS padding decoding.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Information disclosure while creating MQ channels.

There may be information disclosure during memory re-allocation in TZ Secure OS.

While processing the authentication message in UE, improper authentication may lead to information disclosure.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

Cryptographic issue while parsing RSA keys in COBR format.

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.

Memory corruption while processing key blob passed by the user.

Memory corruption in Core Services while executing the command for removing a single event listener.