CVE-2023-26073

🗓️ 13 Mar 2023 00:00:00Reported by mitreType

An issue in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300 and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the extended emergency number list

Reporter	Title	Published	Views	Family All 12
Android Security Bulletins	Pixel Update Bulletin—April 2023Stay organized with collectionsSave and categorize content based on your preferences.	10 Apr 202300:00	–	androidsecurity
Circl	CVE-2023-26073	13 Mar 202317:23	–	circl
CNNVD	SAMSUNG Mobile Chipset 缓冲区错误漏洞	13 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-26073	13 Mar 202300:00	–	cvelist
EUVD	EUVD-2023-29947	3 Oct 202520:07	–	euvd
GoogleProjectZero	Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems	16 Mar 202300:00	–	googleprojectzero
NCSC	Vulnerabilities discovered in mobile devices with Samsung Exynos Modem	17 Mar 202300:00	–	ncsc
NVD	CVE-2023-26073	13 Mar 202314:15	–	nvd
OSV	PUB-A-269656813	1 Apr 202300:00	–	osv
Prion	Heap overflow	13 Mar 202314:15	–	prion

NVD

Node

samsung exynos_850_firmwareMatch-

AND

samsung exynos_850Match-

Node

samsung exynos_980_firmwareMatch-

AND

samsung exynos_980Match-

Node

samsung exynos_1080_firmwareMatch-

AND

samsung exynos_1080Match-

Node

samsung exynos_1280_firmwareMatch-

AND

samsung exynos_1280Match-

Node

samsung exynos_2200_firmwareMatch-

AND

samsung exynos_2200Match-

Node

samsung exynos_modem_5123_firmwareMatch-

AND

samsung exynos_modem_5123Match-

Node

samsung exynos_modem_5300_firmwareMatch-

AND

samsung exynos_modem_5300Match-

Node

samsung exynos_auto_t5123_firmwareMatch-

AND

samsung exynos_auto_t5123Match-

Node

samsung exynos_w920_firmwareMatch-

AND

samsung exynos_w920Match-

Source	Link
semiconductor	www.semiconductor.samsung.com/processor/modem/
semiconductor	www.semiconductor.samsung.com/support/quality-support/product-security-updates/
packetstormsecurity	www.packetstormsecurity.com/files/171380/Shannon-Baseband-NrmmMsgCodec-Extended-Emergency-Number-List-Heap-Buffer-Overflow.html
bugs	www.bugs.chromium.org/p/project-zero/issues/detail
semiconductor	www.semiconductor.samsung.com/processor/mobile-processor/
googleprojectzero	www.googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html
project-zero	www.project-zero.issues.chromium.org/issues/42451535

03 Mar 2025 20:15Current

9.6High risk

Vulners AI Score9.6

CVSS 3.17.6 - 9.8

EPSS0.01357

SSVC

CWE-787