Lucene search

[email protected]CVE-2023-41111

HistoryNov 08, 2023 - 8:15 a.m.

CVE-2023-41111

2023-11-0808:15:09

CWE-787

[email protected]

web.nvd.nist.gov

samsung

exynos

mobile processor

wearable processor

modem

cve-2023-41111

security

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.1%

JSON

An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). Improper handling of a length parameter inconsistency can cause abnormal termination of a mobile phone. This occurs in the RLC task and RLC module.

Affected configurations

NVD

Node

samsungexynos_9810Match-

AND

samsungexynos_9810_firmwareMatch-

Node

samsungexynos_9610Match-

AND

samsungexynos_9610_firmwareMatch-

Node

samsungexynos_9820Match-

AND

samsungexynos_9820_firmwareMatch-

Node

samsungexynos_980Match-

AND

samsungexynos_980_firmwareMatch-

Node

samsungexynos_850Match-

AND

samsungexynos_850_firmwareMatch-

Node

samsungexynos_1080Match-

AND

samsungexynos_1080_firmwareMatch-

Node

samsungexynos_2100Match-

AND

samsungexynos_2100_firmwareMatch-

Node

samsungexynos_2200Match-

AND

samsungexynos_2200_firmwareMatch-

Node

samsungexynos_1280_firmwareMatch-

AND

samsungexynos_1280Match-

Node

samsungexynos_1380_firmwareMatch-

AND

samsungexynos_1380Match-

Node

samsungexynos_1330_firmwareMatch-

AND

samsungexynos_1330Match-

Node

samsungexynos_9110_firmwareMatch-

AND

samsungexynos_9110Match-

Node

samsungexynos_w920_firmwareMatch-

AND

samsungexynos_w920Match-

Node

samsungexynos_modem_5123_firmwareMatch-

AND

samsungexynos_modem_5123Match-

Node

samsungexynos_modem_5300_firmwareMatch-

AND

samsungexynos_modem_5300Match-

Node

samsungexynos_auto_t5123_firmwareMatch-

AND

samsungexynos_auto_t5123Match-

CPENameOperatorVersion
samsung:exynos_9810_firmwaresamsung exynos 9810 firmwareeq-

CPE	Name	Operator	Version
samsung:exynos_9810_firmware	samsung exynos 9810 firmware	eq	-

References

semiconductor.samsung.com/support/quality-support/product-security-updates/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.1%

JSON

Related for CVE-2023-41111

prion1 nvd1 cvelist1