Description
In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01191612 (MSV-981).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MediaTek | MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8791, MT8791T, MT8797 | Modem NR15 | — |
Advisories 3
- WID-SEC-2025-0481 Pixel Patchday March 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 4, 2025
- WID-SEC-2024-0550 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 4, 2024
- WID-SEC-2024-0297 Android Patchday — Februar 2024 BSI CERT-Bund (WID) · Feb 5, 2024