CVE-2023-21634
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-21634 is a memory corruption vulnerability affecting the Radio Interface Layer in certain devices. This issue arises when the layer processes SMS messages or attempts to write SMS data to a SIM card. An attacker can potentially exploit this vulnerability by sending a specially crafted SMS message, resulting in unintended memory manipulation and potential code execution. Successful exploitation could lead to significant security risks, including unauthorized access to sensitive data or system takeover. Users are strongly advised to install the available patch as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.