Lucene search

MitreCVELIST:CVE-2023-26076

HistoryMar 13, 2023 - 12:00 a.m.

CVE-2023-26076

2023-03-1300:00:00

mitre

www.cve.org

samsung

mobile chipset

baseband modem

exynos 1280

exynos 2200

exynos modem 5123

exynos modem 5300

exynos auto t5123

sm message codec

intra-object overflow

insufficient parameter validation

decoding

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved options.

References

packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html

googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html

semiconductor.samsung.com/processor/mobile-processor/

semiconductor.samsung.com/processor/modem/

semiconductor.samsung.com/support/quality-support/product-security-updates/