2020 · Conference paper
BaseSAFE: Baseband SAnitized Fuzzing through Emulation
BaseSAFE partially rehosts closed-source cellular baseband firmware for instrumented fuzzing and uses a sanitizing allocator to detect heap buffer overflows.
Scope and limitations
The evaluation fuzzed rogue-base-station-accessible parsers in a Nucleus RTOS-based MediaTek baseband, using LTE signaling message test cases. It found memory corruption and reached about 15,000 test cases per second in total.
Why it fits this collection
It reverse engineers and rehosts commercial baseband firmware to expose its parsers to off-device security testing.
Publication and review details
- Venue
- Proceedings of the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks
- Status
- Conference paper
- Publication / posting date
- July 8, 2020
- Date source
- Published date in the Crossref record for the DOI listed on arXiv.
- First arXiv submission
- May 15, 2020
- arXiv
- 2005.07797
- Reviewed arXiv version
- v1
- DOI
- 10.1145/3395351.3399360
The DOI comes from the arXiv record, and the venue and date from Crossref.
Sources reviewed
Reviewed against the paper and its primary sources. Cite the original authors using the linked paper or BibTeX.