CVE-2021-25480

Name of the Vulnerable Software and Affected Versions: Qualcomm modem versions prior to SMR Oct-2021 Release 1

Description: The issue is related to a lack of replay attack protection in the GUTI REALLOCATION COMMAND message process. This can lead to a remote denial of service on the mobile network connection.

Recommendations: For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the GUTI REALLOCATION COMMAND message process to minimize the risk of exploitation.