Nr17r vulnerabilities
6 known vulnerabilities in Nr17r from MediaTek. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
MT2735, MT2737, MT6739, MT6761, MT6762…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User i
- 7.5 High severity
MT2735, MT2737, MT6739, MT6761, MT6762…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. Use
- 8.8 High severity
MT2735, MT2737, MT6813, MT6815, MT6833…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. Use
- 8.0 High severity
MT6813, MT6835, MT6835T, MT6878, MT6878M…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User i
- 7.5 High severity
MT2735, MT2737, MT6739, MT6761, MT6762…: Inadequate Encryption Strength
In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. Us
- 9.8 Critical severity
MT2737, MT6813, MT6835, MT6835T, MT6878…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interactio