CVE Catalog
CVE-2025-21488
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk0.27%
17th percentile - higher than 17% of all known CVEs
Summary
Information disclosure while decoding RTP packet headers received by UE from the network when the padding bit is set.
Risk Assessment
The risk is potential disclosure of sensitive information transmitted in RTP packets, which could compromise communication confidentiality.
Recommendation
It is recommended to update the UE device software to a patched version and monitor network messages for malformed RTP headers.
Other vulnerabilities in UE (User Equipment)
Original NVD description (English source)
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS