Attributed metadata history

Up to 100 retained publisher events per page for d84068509a6decebc2f654364e0e5c6b4f00b22f1136121fb4e67e1127aebbd5. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_350d40f2cc69277bca

observed · 2026-10-12 08:34:03 UTC

An attacker sending a malformed SIP message over VoLTE to a device with a Mediatek baseband can trigger the vulnerability described here. The impact is stack buffer overflow in the baseband, triggered by malformed SDP data in VoLTE message such as SIP INVITE or MESSAGE request. The vulnerability described in this advisory affected a wide range of Mediatek devices. The January 2024 issue of the Mediatek Security Bulletin contains this vulnerability as CVE-2023-32874. Vulnerability Details When a SIP message contains SDP data, first the cc_call_unpack_sdpmsg routine is invoked to unpack the message bytes into an internal representation (sdp_message_struct). Later the codec information is extracted from this internal representation by calling several codec extracting functions.

Fingerprint: fb35e6c32aca102d15c05a85e26f3121d441ee2957d4b1aceec3b596e50070de

intelligence_src_350d40f2cc69277bca

observed · 2026-10-12 08:34:02 UTC

available

Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578