SECURITY ADVISORY DOSSIER

CVE-2021-45464

CVSS 9.8CRITICAL

Baseband Modulated RF Packet Parsing Memory Corruption

Protocol StackBaseband
Disclosed Year2021
CWE ClassificationCWE-122: Heap-based Buffer Overflow
ResearchersKarsten Nohl, Mathew Solnik

Vulnerability Overview

Heap buffer overflow in LTE/5G baseband PHY layer RRC connection reconfiguration processing allows remote over-the-air arbitrary code execution via malicious base station broadcasts.

Affected Telecom Components

⚡ Baseband Firmware ⚡ RRC Layer ⚡ PHY Modem Stack ⚡ Qualcomm/MediaTek Baseband

Recommended Mitigation Guidelines

Apply vendor modem patch update, enable ASLR/DEP in baseband RTOS, and enforce strict length bounds during RRC ASN.1 decoding.

Decrypt Full Baseband & Chipset Tracing in RANbase

Access raw packet captures, cellular modem crash logs, and firmware teardowns for CVE-2021-45464 in the official RANbase database.

Explore RANbase Intelligence →