CVE-2025-27034CWE-129

Improper Validation of Array Index in Multi-Mode Call Processor

Critical · published September 24, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

🔥 A devastating memory corruption vulnerability lurks when selecting the PLMN from a failed list, leaving systems vulnerable to chaos! Think of it like a restaurant that serves food orders based on a faulty menu — if the chef doesn't get the right ingredients, the entire meal could become a disaster. In this case, a mismanaged state during selection can lead to serious malfunctions in your device's operations. An attacker could exploit this vulnerability to crash devices or even execute arbitrary code, leading to total system compromise. Imagine your device going haywire, causing major service disruptions and data leaks. This is a critical situation that could wreak havoc on any connected system!

Put simply

Think of it like a restaurant that serves food orders based on a faulty menu — if the chef doesn't get the right ingredients, the entire meal could become a disaster. In this case, a mismanaged state during selection can lead to serious malfunctions in your device's operations. This vulnerability stems from improper memory handling when selecting the Public Land Mobile Network (PLMN) from a failed list, which can lead to memory corruption and potentially allow an attacker to execute arbitrary actions.

What to do

An attacker could exploit this vulnerability to crash devices or even execute arbitrary code, leading to total system compromise. Imagine your device going haywire, causing major service disruptions and data leaks. This is a critical situation that could wreak havoc on any connected system! To mitigate this risk, immediately update your systems to the latest firmware version that addresses this issue. Ensure all relevant configurations are checked and do a thorough audit of your network devices to verify they are secure. Don't wait—act fast! You can tackle this! By following these steps, you'll transform your system into a fortress. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00414 · 34.6th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2025-09-24T15:33Z
EPSS history
Timeline
  • 24 SEP 15:33Z
    Improper Validation of Array Index in Multi-Mode Call Processor
    cvelistv5