Lucene search

[email protected]CVE-2023-41112

HistoryNov 08, 2023 - 8:15 a.m.

CVE-2023-41112

2023-11-0808:15:09

CWE-120

[email protected]

web.nvd.nist.gov

samsung

exynos

buffer copy

vulnerability

rlc task

rlc module

abnormal termination

nvd

cve-2023-41112

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.1%

JSON

An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). A buffer copy, without checking the size of the input, can cause abnormal termination of a mobile phone. This occurs in the RLC task and RLC module.

Affected configurations

NVD

Node

samsungexynos_9810_firmwareMatch-

AND

samsungexynos_9810Match-

Node

samsungexynos_9610Match-

AND

samsungexynos_9610_firmwareMatch-

Node

samsungexynos_9820Match-

AND

samsungexynos_9820_firmwareMatch-

Node

samsungexynos_980Match-

AND

samsungexynos_980_firmwareMatch-

Node

samsungexynos_850Match-

AND

samsungexynos_850_firmwareMatch-

Node

samsungexynos_1080Match-

AND

samsungexynos_1080_firmwareMatch-

Node

samsungexynos_2100Match-

AND

samsungexynos_2100_firmwareMatch-

Node

samsungexynos_2200Match-

AND

samsungexynos_2200_firmwareMatch-

Node

samsungexynos_1280Match-

AND

samsungexynos_1280_firmwareMatch-

Node

samsungexynos_1380Match-

AND

samsungexynos_1380_firmwareMatch-

Node

samsungexynos_1330Match-

AND

samsungexynos_1330_firmwareMatch-

Node

samsungexynos_9110Match-

AND

samsungexynos_9110_firmwareMatch-

Node

samsungexynos_w920Match-

AND

samsungexynos_w920_firmwareMatch-

Node

samsungexynos_modem_5123_firmwareMatch-

AND

samsungexynos_modem_5123Match-

Node

samsungexynos_modem_5300_firmwareMatch-

AND

samsungexynos_modem_5300Match-

Node

samsungexynos_auto_t5123_firmwareMatch-

AND

samsungexynos_auto_t5123Match-

CPENameOperatorVersion
samsung:exynos_9810_firmwaresamsung exynos 9810 firmwareeq-

CPE	Name	Operator	Version
samsung:exynos_9810_firmware	samsung exynos 9810 firmware	eq	-

References

semiconductor.samsung.com/support/quality-support/product-security-updates/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.1%

JSON

Related for CVE-2023-41112

cvelist1 prion1 nvd1