# BaseSAFE: Baseband SAnitized Fuzzing through Emulation

> BaseSAFE partially rehosts closed-source cellular baseband firmware for instrumented fuzzing and uses a sanitizing allocator to detect heap buffer overflows.

- Authors: Dominik Maier; Lukas Seidel; Shinjo Park
- Venue: Proceedings of the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks
- Status: Conference paper
- Publication / posting date: July 8, 2020
- Date source: Published date in the Crossref record for the DOI listed on arXiv.
- First arXiv submission: May 15, 2020
- arXiv: 2005.07797
- Reviewed arXiv version: v1
- DOI: 10.1145/3395351.3399360
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-06
- Original paper: <https://doi.org/10.1145/3395351.3399360>
- PDF: <https://arxiv.org/pdf/2005.07797>
- BibTeX: <https://awesomerea.org/papers/citations/paper-basesafe.bib>
- Catalog page: <https://awesomerea.org/papers/paper-basesafe/>
- Record JSON: <https://awesomerea.org/papers/paper-basesafe/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/papers/paper-basesafe/index.md)

## Scope and limitations

The evaluation fuzzed rogue-base-station-accessible parsers in a Nucleus RTOS-based MediaTek baseband, using LTE signaling message test cases. It found memory corruption and reached about 15,000 test cases per second in total.

## Why it fits this collection

It reverse engineers and rehosts commercial baseband firmware to expose its parsers to off-device security testing.

## Publication and review notes

The DOI comes from the arXiv record, and the venue and date from Crossref.

## Primary sources

1. <https://arxiv.org/abs/2005.07797>
2. <https://api.crossref.org/works/10.1145/3395351.3399360>

## About this entry

Reviewed against the paper and its primary sources. Cite the original authors using the linked paper or BibTeX.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.