Attributed metadata history
Up to 100 retained publisher events per page for e803a184cf2c220459094c48a5006ffe960ae2c37b5a86622c8b158194b8e1fb. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deployed fix in 2021. Vulnerability Details When processing the GSM Radio Resource Management Channel Release message, the CSN.1 decoding of the “Cell selection indicator after release of all TCH and SDCCH” information element contains a heap buffer overflow in the function FDD_csrr_decode_redirection_ie. The “Cell selection indicator after release of all TCH and SDCCH” is a type 4 information element with a minimum length of 4 octets.
Fingerprint: dff1cb8ef5b9402db88a7c5f1c95eb2dcdb7573dbedcdc68cf7ab9d783702c1f
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
available
Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578