Telecom Security Advisories
Tracked 3GPP, GSMA, and cellular stack vulnerability advisories mapped directly to video briefings, protocol specifications, and mitigation guidelines.
5G SBA HTTP/2 Mutual Authentication Bypass & Rogue NF Registration
Improper TLS client certificate validation in 5G Service Based Architecture NRF (Network Repository Function) allows unauthenticated network functions to register rogue endpoints and intercept cross-slice SBI traffic.
SS7 MAP SendRoutingInfoForSM Subscriber Location Tracking
Flaws in SS7 Mobile Application Part (MAP) signaling handling allow remote attackers to issue fake SendRoutingInfoForSM requests to obtain cell global identifiers (CGI) and track subscriber location worldwide.
Baseband Modulated RF Packet Parsing Memory Corruption
Heap buffer overflow in LTE/5G baseband PHY layer RRC connection reconfiguration processing allows remote over-the-air arbitrary code execution via malicious base station broadcasts.
eSIM UICC Remote Profile Provisioning OTA Command Injection
Insufficient signature verification in SGP.22 eSIM Remote SIM Provisioning (RSP) download protocol enables over-the-air applet installation and subscriber identity cloning.
O-RAN Near-RT RIC xApp Message Injection & RAN Hijacking
Lack of authorization checking on the E2 interface in Near-Real-Time RAN Intelligent Controller (RIC) allows malicious xApps to inject unauthorized RRM control messages and disrupt gNodeB beamforming.
GTP-U User Plane Tunnel Spoofing & Traffic Decapsulation
Vulnerability in GPRS Tunneling Protocol User Plane (GTP-U) encapsulation allowing unauthenticated TEID injection to intercept subscriber IP traffic across 4G LTE/5G NSA user planes.