Lucene search

K
cve[email protected]CVE-2023-26498
HistoryMar 23, 2023 - 1:15 a.m.

CVE-2023-26498

2023-03-2301:15:12
CWE-787
web.nvd.nist.gov
45
samsung
baseband modem
exynos modem
memory corruption
improper checking
sdp
cve-2023-26498

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corruption can occur due to improper checking of the number of properties while parsing the chatroom attribute in the SDP (Session Description Protocol) module.

Affected configurations

NVD
Node
samsungexynos_modem_5300_firmwareMatch-
AND
samsungexynos_modem_5300Match-
Node
samsungexynos_modem_5123_firmwareMatch-
AND
samsungexynos_modem_5123Match-
Node
samsungexynos_980_firmwareMatch-
AND
samsungexynos_980Match-
Node
samsungexynos_1080_firmwareMatch-
AND
samsungexynos_1080Match-
Node
samsungexynos_auto_t5123_firmwareMatch-
AND
samsungexynos_auto_t5123Match-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

Related for CVE-2023-26498