CyberRota Analysis
AI-GeneratedThe vulnerability exists in the MMS server connection handler, which improperly processes BER-encoded request data, allowing for a heap out-of-bounds read due to a missing bounds check. This flaw can lead to the termination of the MMS service process, resulting in a denial-of-service condition. Organizations using the affected MMS server should prioritize remediation to prevent service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This results in a one byte heap out-of-bounds read and causes the MMS service process to terminate, leading to a denial-of-service condition.