Lucene search

K
cve[email protected]CVE-2023-26496
HistoryMar 23, 2023 - 2:15 a.m.

CVE-2023-26496

2023-03-2302:15:12
CWE-787
web.nvd.nist.gov
42
samsung
baseband modem
exynos
memory corruption
parameter length
fmtp attribute
sdp
cve-2023-26496

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in the SDP (Session Description Protocol) module.

Affected configurations

NVD
Node
samsungexynos_modem_5300Match-
AND
samsungexynos_modem_5300_firmwareMatch-
Node
samsungexynos_modem_5123Match-
AND
samsungexynos_modem_5123_firmwareMatch-
Node
samsungexynos_980Match-
AND
samsungexynos_980_firmwareMatch-
Node
samsungexynos_1080Match-
AND
samsungexynos_1080_firmwareMatch-
Node
samsungexynos_auto_t5123Match-
AND
samsungexynos_auto_t5123_firmwareMatch-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

Related for CVE-2023-26496