In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01289384; Issue ID: MSV-2436.
2025-02-03T04:15:08.423
2025-03-18T14:15:41.747
Modified
CVSSv3.1: 9.8 (CRITICAL)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | mediatek | nr16 | - | Yes |
| Operating System | mediatek | nr17 | - | Yes |
| Operating System | mediatek | nr17r | - | Yes |
| Hardware | mediatek | mt2737 | - | No |
| Hardware | mediatek | mt6813 | - | No |
| Hardware | mediatek | mt6835 | - | No |
| Hardware | mediatek | mt6835t | - | No |
| Hardware | mediatek | mt6878 | - | No |
| Hardware | mediatek | mt6878m | - | No |
| Hardware | mediatek | mt6879 | - | No |
| Hardware | mediatek | mt6886 | - | No |
| Hardware | mediatek | mt6895 | - | No |
| Hardware | mediatek | mt6895tt | - | No |
| Hardware | mediatek | mt6896 | - | No |
| Hardware | mediatek | mt6897 | - | No |
| Hardware | mediatek | mt6899 | - | No |
| Hardware | mediatek | mt6980 | - | No |
| Hardware | mediatek | mt6980d | - | No |
| Hardware | mediatek | mt6983 | - | No |
| Hardware | mediatek | mt6983t | - | No |
| Hardware | mediatek | mt6985 | - | No |
| Hardware | mediatek | mt6985t | - | No |
| Hardware | mediatek | mt6989 | - | No |
| Hardware | mediatek | mt6989t | - | No |
| Hardware | mediatek | mt6990 | - | No |
| Hardware | mediatek | mt6991 | - | No |
| Hardware | mediatek | mt8673 | - | No |
| Hardware | mediatek | mt8676 | - | No |
| Hardware | mediatek | mt8678 | - | No |
| Hardware | mediatek | mt8795t | - | No |
| Hardware | mediatek | mt8798 | - | No |
| Hardware | mediatek | mt8863 | - | No |