Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jq2f-vxh6-4f2r

Опубликовано: 16 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS or RCE.Product: AndroidVersions: Android SoCAndroid ID: A-228868888

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS or RCE.Product: AndroidVersions: Android SoCAndroid ID: A-228868888

EPSS

Процентиль: 35%
0.00142
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS or RCE.Product: AndroidVersions: Android SoCAndroid ID: A-228868888

CVSS3: 9.6
fstec
почти 4 года назад

Уязвимость компонента обработки NAS-сообщений микропрограммного обеспечения процессоров для устройств 2/3/4/5G Unisoc, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 35%
0.00142
Низкий

9.8 Critical

CVSS3