The Patching Friars' AlmanacA calendar of CVE saints

Patron of December 7

5GhoulHoly card for 5ghoul, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 5G 5Ghoul SIGNUM MALEDICTUM
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint 5Ghoul, Demon of the Modem

Patron of 5G modems, fake base stations, and everyone left with no signal at the worst moment.

Life

In December 2023 the ASSET group at SUTD in Singapore published 5Ghoul, a family of flaws in Qualcomm and MediaTek 5G modems built into hundreds of phone and router models. With a rogue base station sending malformed RRC messages, a nearby attacker could make the modem freeze or reboot over and over, leaving the device without a connection until the radio was turned off.

Prayer

O Saint 5Ghoul, who haunts the modem from a cell that does not exist, let our basebands distrust unknown towers. Amen.

How to celebrate

Celebrated by updating the baseband firmware and, when in doubt, flicking airplane mode on for a moment.

Unknown antenna, haunted connection.

Technical record

Disclosed on
December 7 2023
CVE
CVE-2023-33042CVE-2023-32842CVE-2024-20003
CVSS
7.5
Product
Qualcomm, Inc. · Snapdragon

Transient DOS in Modem after RRC Setup message is received.

Sources: asset-group.github.io

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.