Vulnerabilities

In the baseband, memory corruption during NAS packet processing can cause a denial of service.

Improper handling of messages before AS security activation can cause unexpected behavior

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.

In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability

Incorrect handling of SIP packets leads to baseband crashes

Continuously sending control‑plane messages causes the baseband to crashes.