ASR Out-of-Bounds Write Vulnerability in LTE Telephony on Multiple Linux Distributions

A high-severity out-of-bounds write vulnerability has been identified in the ASR180x cellular baseband chip, specifically within the LTE telephony component. This issue, which may lead to a buffer underrun, affects several Linux distributions, including Falcon_Linux, Kestrel, and Lapwing_Linux, prior to version 1536. The vulnerability is linked to the AT command server's device API.

Impact

Exploitation of this vulnerability may cause a buffer underrun, potentially leading to undefined behavior in the application, such as memory corruption or application crashes.