PT-2021-16667

CVE-2021-25477

·

Published

2021-10-06

·

Updated

2022-04-01

Description by

CVSS 3.1
4.9
Medium
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Mediatek RRC Protocol stack versions prior to SMR Oct-2021 Release 1
Description: The issue is related to improper error handling in the Mediatek RRC Protocol stack, which can cause a modem crash and allow for remote denial of service.
Recommendations: For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Release 1 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-415: Double Free
Related identifiers
CVE-2021-25477
ASB-A-220262213
M-MOLY00684727
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com