Lucene search
Samsung MobileCVE-2023-21503HistoryMay 04, 2023 - 9:15 p.m.
CVE-2023-21503
2023-05-0421:15:10
CWE-120
CWE-20
Samsung Mobile
web.nvd.nist.gov
28
cve-2023-21503
buffer overflow
vulnerability
shannon baseband
remote attackers
memory access
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.002
Percentile
55.5%
Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
Affected configurations
Node
samsungandroidMatch13.0-
ORsamsungandroidMatch13.0smr-apr-2023-r1
ORsamsungandroidMatch13.0smr-dec-2022-r1
ORsamsungandroidMatch13.0smr-feb-2023-r1
ORsamsungandroidMatch13.0smr-jan-2023-r1
ORsamsungandroidMatch13.0smr-mar-2023-r1
ORsamsungandroidMatch13.0smr-nov-2022-r1
ORsamsungandroidMatch13.0smr-oct-2022-r1
samsungexynosMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:* |
| samsung | exynos | - | cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Samsung Mobile",
"product": "Samsung Mobile Devices",
"versions": [
{
"version": "Select devices using Exynos CP chipsets",
"status": "affected",
"lessThan": "SMR May-2023 Release 1",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-21503
2023-05-04 21:15:10
prion
prion
Buffer overflow
2023-05-04 21:15:00
cvelist
cvelist
CVE-2023-21503
2023-05-04 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.002
Percentile
55.5%
Related for CVE-2023-21503