Attributed metadata history

Up to 100 retained publisher events per page for b6e3e0ce9b9110415721f40cd7fbf7b66d231f386b6d3563cc12f181758552d6. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_350d40f2cc69277bca

observed · 2026-10-12 08:34:02 UTC

An attacker sending a malformed SIP message over VoLTE to a device with a Mediatek baseband can trigger the vulnerability described here. The impact is DoS in the baseband, triggered by malformed VoLTE message such as SIP INVITE or MESSAGE request. The vulnerability described in this advisory affected a wide range of Mediatek devices. This vulnerability is assigned CVE-2025-20725. Vulnerability Details Crash happens due to a NULL access. int sdp_msg_unpack_bandwidth(char **param_1,undefined *param_2) { iVar2 = sdp_msg_unpack_string_list.constprop.26(param_1,0x62,-1,(undefined *)&uStack_1c); if (iVar2 == 0) { puVar7 = &uStack_1c; local_20 = (char *)0x0; while ((char *)puVar7[1] != (char *)0x0) { puVar3 = (uint *)voip_strtok_r((char *)puVar7[1],":",&local_20); // [1] *(undefined4 *)(param_2 + 4) = 0; bVar1 = sdp_msg_unpack_type(5,5,-0x6e41ac2c,puVar3,(int *)(param_2 + 4),(uint **)0x0); .

Fingerprint: 7da172d65ed651ed81185ff9728fd46c67d4e2c05a26215fb0246b9db53df220

intelligence_src_350d40f2cc69277bca

observed · 2026-10-12 08:34:02 UTC

available

Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578