CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Lifecycle Timeline
3Tags
Description
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Analysis
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Technical Context
Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls. This vulnerability is classified as Buffer Over-read (CWE-126).
Affected Products
Affected products: Qualcomm Sm6250 Firmware -, Qualcomm Sm6370 Firmware -, Qualcomm Sm7315 Firmware -, Qualcomm Sm7325P Firmware -, Qualcomm Sm8550P Firmware -
Remediation
Implement proper access controls. Sanitize error messages in production. Review logging practices to avoid capturing sensitive data.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today
EUVD-2025-20492