In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Mediatek
Subscribe
|
Mt6835
Subscribe
Mt6873
Subscribe
Mt6875
Subscribe
Mt6879
Subscribe
Mt6883
Subscribe
Mt6885
Subscribe
Mt6886
Subscribe
Mt6889
Subscribe
Mt6895
Subscribe
Mt6980
Subscribe
Mt6983
Subscribe
Mt6985
Subscribe
Mt6990
Subscribe
Mt8673
Subscribe
Mt8675
Subscribe
Mt8791
Subscribe
Mt8791t
Subscribe
Mt8797
Subscribe
Mt8798
Subscribe
Nr15
Subscribe
Nr16
Subscribe
Nr17
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-24881 | In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 16 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: MediaTek
Published:
Updated: 2024-09-05T15:17:22.422Z
Reserved: 2022-10-28T02:03:10.759Z
Link: CVE-2023-20702
Updated: 2024-08-02T09:14:40.992Z
Status : Modified
Published: 2023-11-06T04:15:07.653
Modified: 2024-11-21T07:41:22.977
Link: CVE-2023-20702
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD