CVE Catalog
CVE-2025-21487
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk0.26%
16th percentile - higher than 16% of all known CVEs
Summary
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Risk Assessment
The risk is potential disclosure of sensitive information transmitted in RTP packets, which could compromise communication confidentiality.
Recommendation
It is recommended to update the UE device software to a patched version and monitor network messages for malformed payload lengths.
Other vulnerabilities in UE (User Equipment)
Original NVD description (English source)
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS