Lucene search

K
cve[email protected]CVE-2023-28613
HistoryApr 04, 2023 - 4:15 p.m.

CVE-2023-28613

2023-04-0416:15:07
CWE-190
web.nvd.nist.gov
17
samsung
exynos
processors
integer overflow
ipv4
fragment handling
cve-2023-28613
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.

Affected configurations

NVD
Node
samsungexynos_1280_firmwareMatch-
AND
samsungexynos_1280Match-
Node
samsungexynos_2200_firmwareMatch-
AND
samsungexynos_2200Match-
Node
samsungexynos_modem_5300_firmwareMatch-
AND
samsungexynos_modem_5300Match-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

Related for CVE-2023-28613