Vulnerabilities

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.

Incorrect handling of SDP payload leads to a Denial of Service

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.

In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability

Incorrect handling of SIP packets leads to baseband crashes

Continuously sending control‑plane messages causes the baseband to crashes.