CVE-2023-35648

Summary

CVE-2023-35648 is a newly discovered vulnerability affecting the ProtocolMiscLceIndAdapter function in protocolmiscadapter.cpp. The issue involves a missing bounds check in the GetConfLevel() function, resulting in a possible out-of-bounds read. An attacker could exploit this vulnerability to disclose sensitive information, potentially leading to baseband firmware compromise, without requiring user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.