SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
At the //heise devSec conference on October 6-7, 2021 Mathias Tausig gave an online-workshop about “Hands-On Threat Modeling” for 18 participants and a talk (online) to 60 participants concerning the topic: “Reifegradbewertung für TechnikerInnen oder wie ich lernte OWASP SAMM zu lieben”. heise devSec is a conference with… Read More
Together with sipgate and ISMK Stralsund, Gabriel Gegenhuber, researcher at SBA Research and University of Vienna, and Michael Pucher, researcher at SBA research, discovered and investigated a vulnerability in the Voice of LTE (VoLTE) stack that is broadly used within MediaTek-based smartphones. ∞
In the Mediatek modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. ∞