Cheoljun Park

**Name of the Vulnerable Software and Affected Versions** Verizon IMS (affected versions not specified) **Description** The SIP signaling stack implements SIP signaling without IPsec integrity protection, specifically lacking Security-Client/Security-Server headers and ESP traffic. This allows an on-path attacker to compromise the confidentiality, integrity, and authenticity of VoLTE signaling through passive monitoring and active manipulation of unsecured SIP messages over the radio and core network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** (affected versions not specified) **Description** A transient Denial-of-Service (DoS) condition may occur during the processing of Common Control Channel (CCCH) data when the network (NW) sends data with an invalid length. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LTE network (affected versions not specified) **Description** A transient Denial-of-Service (DoS) condition can occur while processing a random-access response (RAR) containing an invalid Protocol Data Unit (PDU) length on an LTE network. A PDU is a unit of data exchanged between network devices. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Exynos baseband versions prior to SMR Dec-2021 Release 1 **Description** The issue arises from an improper check or handling of exceptional conditions, allowing attackers to track locations. **Recommendations** For Exynos baseband versions prior to SMR Dec-2021 Release 1, update to SMR Dec-2021 Release 1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15 iPadOS versions prior to 15 **Description** A logic issue was addressed with improved state management. In certain situations, the baseband would fail to enable integrity and ciphering protection. **Recommendations** For iOS versions prior to 15, update to iOS 15 or later to resolve the issue. For iPadOS versions prior to 15, update to iPadOS 15 or later to resolve the issue.