Incorrect handling of SIP packets leads to baseband crashes

In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

iMessage Group Chat Authorization Vulnerability

An authorization issue was addressed with improved validation. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage group chat and receive its messages.

Same-Network Attacker Can Bypass AirPlay Pairing Rate Limit

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

D-Link DSL-6740C FTP Daemon ftpd_conf.php hard-coded credentials

A vulnerability was identified in D-Link DSL-6740C 20131126. This affects an unknown function of the file /etc/templates/ftpd/ftpd_conf.php of the component FTP Daemon. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit is publicly available and might be used.

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.

Improper LTE RRC Message Handling Leads to Denial-of-Service on Samsung Exynos Processors

In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

Out-of-bounds memory access in a device driver due to improper resource state tracking.

In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

A double free vulnerability in NPU driver due to improper pointer management (941)

A double free vulnerability in NPU driver due to improper pointer management (940)

Improper handling of messages before AS security activation can cause unexpected behavior

In the baseband, memory corruption during NAS packet processing can cause a denial of service.