Post #650887
2025-05-21 05:33 UTC
The mobile core team at @sipgate has disclosed a #SIP parsing bug in #mediatek's #VoLTE/ #VoWifi stack which leads to a null-pointer-dereference and ultimately Denial of Service of VoLTE telephony for the affected devices. Around 40 baseband chips were affected which were deployed to over 1000 devices since 2017.
https://www.sipgate.de/blog/sipgate-discovers-null-pointer-dereference-in-mediatek-volte-stack-firmware
Thanks to @hendrikkiel for the great cooperation!
Replies (2)
-
@jannik@chaos.social 2025-05-21 05:35
Außerdem waren @hendrikkiel und ich im #risikozone Podcast zu Gast und haben über SIP und über die o.g. Lücke gesprochen. https://risikozone.de/rz074/
-
@mathias@chaos.social 2025-05-21 12:03
@jannik @sipgate @hendrikkiel thank you for all the dedicated work and published document.