Out of Bounds Write in Modem

Mitigation Strategies

To mitigate this vulnerability, apply the patches identified as MOLY01267281 or MOLY01318201 provided by the vendor.

Since the vulnerability involves a missing bounds check in the modem that can be exploited remotely without user interaction, updating the modem firmware to the patched version is the recommended immediate step.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in the modem component where a missing bounds check can cause an out of bounds write.

An attacker controlling a rogue base station can exploit this flaw to cause a remote denial of service on a user equipment (UE) device connected to that base station.

No user interaction or additional execution privileges are required for exploitation.

Useful 0 Not Useful 0

Impact Analysis

The primary impact of this vulnerability is a remote denial of service condition on affected devices.

If a UE connects to a malicious base station controlled by an attacker, the attacker can trigger the vulnerability to disrupt the device's normal operation.

Useful 0 Not Useful 0