Attributed metadata history

Up to 100 retained publisher events per page for e6b6cbb2c2d634ba89fc048b3442e16b0bd95199a49a91a0542f9e5b85bb42fd. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_350d40f2cc69277bca

observed · 2026-10-12 08:34:03 UTC

An attacker sending a malformed SIP message over VoLTE to a device with a Mediatek baseband can trigger the vulnerability described here. The impact is intra-structure overflow in the baseband, triggered by malformed SDP data in VoLTE message such as SIP INVITE or MESSAGE request. The vulnerability described in this advisory affected a wide range of Mediatek devices. The January 2024 issue of the Mediatek Security Bulletin contains this vulnerability as CVE-2023-32889. Vulnerability Details When a SIP message contains SDP data, first the cc_call_unpack_sdpmsg routine is invoked to unpack the message bytes into an internal representation (sdp_message_struct). Based on that, later, the session object’s des_audio structure is populated with the AMR/AMR-WB codec info.

Fingerprint: 72dd7cc1dfe517ecef71ed351640f295c5ed8422787768ad35d8713d4e336e21

intelligence_src_350d40f2cc69277bca

observed · 2026-10-12 08:34:02 UTC

available

Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578