CVE-2022-21744

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check

published July 6, 2022

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

⚠️ A missing bounds check in Modem 2G RR could let attackers slip in for remote code execution through improperly decoded GPRS data — no user interaction required! Think of it like a restaurant that serves meals without checking if your allergy info is up to date; a menu item could lead to a very bad surprise. Without proper checks, the system is vulnerable to unexpected data causing a ruckus! An attacker could exploit this vulnerability to execute arbitrary code on the affected system, resulting in unauthorized access and potential data breaches. Imagine a rogue chef infiltrating the kitchen and creating their own secret menu without anyone noticing!

Put simply

Think of it like a restaurant that serves meals without checking if your allergy info is up to date; a menu item could lead to a very bad surprise. Without proper checks, the system is vulnerable to unexpected data causing a ruckus! This vulnerability allows an out-of-bounds write due to missing bounds checks while decoding GPRS Packet Neighbour Cell Data (PNCD), enabling attackers to execute code remotely without the need for any special privileges.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on the affected system, resulting in unauthorized access and potential data breaches. Imagine a rogue chef infiltrating the kitchen and creating their own secret menu without anyone noticing! To mitigate this risk, apply the patch ID MOLY00810064 immediately and ensure that all system checks for incoming GPRS data are correctly implemented. Regularly audit your systems for compliance with the latest security practices. You've got this! Stay vigilant and proactive to keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03440 · 88.9th percentile
Published
2022-07-06T13:05Z
EPSS history
Timeline
  • 06 JUL 13:05Z
    In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check
    cvelistv5