In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01671924; Issue ID: MSV-4620.
2025-11-04T07:15:32.113
2025-11-05T17:16:11.350
Analyzed
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | mediatek | lr12a | - | Yes |
| Operating System | mediatek | nr15 | - | Yes |
| Operating System | mediatek | nr16 | - | Yes |
| Hardware | mediatek | mt2735 | - | No |
| Hardware | mediatek | mt2737 | - | No |
| Hardware | mediatek | mt6739 | - | No |
| Hardware | mediatek | mt6761 | - | No |
| Hardware | mediatek | mt6762 | - | No |
| Hardware | mediatek | mt6762d | - | No |
| Hardware | mediatek | mt6762m | - | No |
| Hardware | mediatek | mt6763 | - | No |
| Hardware | mediatek | mt6765 | - | No |
| Hardware | mediatek | mt6765t | - | No |
| Hardware | mediatek | mt6767 | - | No |
| Hardware | mediatek | mt6768 | - | No |
| Hardware | mediatek | mt6769 | - | No |
| Hardware | mediatek | mt6769k | - | No |
| Hardware | mediatek | mt6769s | - | No |
| Hardware | mediatek | mt6769t | - | No |
| Hardware | mediatek | mt6769z | - | No |
| Hardware | mediatek | mt6771 | - | No |
| Hardware | mediatek | mt6833 | - | No |
| Hardware | mediatek | mt6833p | - | No |
| Hardware | mediatek | mt6853 | - | No |
| Hardware | mediatek | mt6853t | - | No |
| Hardware | mediatek | mt6855 | - | No |
| Hardware | mediatek | mt6855t | - | No |
| Hardware | mediatek | mt6873 | - | No |
| Hardware | mediatek | mt6875 | - | No |
| Hardware | mediatek | mt6875t | - | No |
| Hardware | mediatek | mt6877 | - | No |
| Hardware | mediatek | mt6877t | - | No |
| Hardware | mediatek | mt6877tt | - | No |
| Hardware | mediatek | mt6879 | - | No |
| Hardware | mediatek | mt6880 | - | No |
| Hardware | mediatek | mt6883 | - | No |
| Hardware | mediatek | mt6885 | - | No |
| Hardware | mediatek | mt6886 | - | No |
| Hardware | mediatek | mt6889 | - | No |
| Hardware | mediatek | mt6890 | - | No |
| Hardware | mediatek | mt6891 | - | No |
| Hardware | mediatek | mt6893 | - | No |
| Hardware | mediatek | mt6895 | - | No |
| Hardware | mediatek | mt6895tt | - | No |
| Hardware | mediatek | mt6896 | - | No |
| Hardware | mediatek | mt6980 | - | No |
| Hardware | mediatek | mt6980d | - | No |
| Hardware | mediatek | mt6983 | - | No |
| Hardware | mediatek | mt6983t | - | No |
| Hardware | mediatek | mt6985 | - | No |
| Hardware | mediatek | mt6985t | - | No |
| Hardware | mediatek | mt6989 | - | No |
| Hardware | mediatek | mt6989t | - | No |
| Hardware | mediatek | mt6990 | - | No |
| Hardware | mediatek | mt8666 | - | No |
| Hardware | mediatek | mt8667 | - | No |
| Hardware | mediatek | mt8673 | - | No |
| Hardware | mediatek | mt8675 | - | No |
| Hardware | mediatek | mt8765 | - | No |
| Hardware | mediatek | mt8766 | - | No |
| Hardware | mediatek | mt8766r | - | No |
| Hardware | mediatek | mt8768 | - | No |
| Hardware | mediatek | mt8771 | - | No |
| Hardware | mediatek | mt8786 | - | No |
| Hardware | mediatek | mt8788 | - | No |
| Hardware | mediatek | mt8788e | - | No |
| Hardware | mediatek | mt8791 | - | No |
| Hardware | mediatek | mt8791t | - | No |
| Hardware | mediatek | mt8795t | - | No |
| Hardware | mediatek | mt8797 | - | No |
| Hardware | mediatek | mt8798 | - | No |
| Hardware | mediatek | mt8893 | - | No |