Lucene search

MitreCVELIST:CVE-2023-26496

HistoryMar 23, 2023 - 12:00 a.m.

CVE-2023-26496

2023-03-2300:00:00

mitre

www.cve.org

samsung

baseband modem

exynos modem 5123

exynos modem 5300

exynos 980

exynos 1080

exynos auto t5124

memory corruption

parameter length

parsing

sdp

session description protocol

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

JSON

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in the SDP (Session Description Protocol) module.

References

semiconductor.samsung.com/processor/mobile-processor/

semiconductor.samsung.com/processor/modem/

semiconductor.samsung.com/support/quality-support/product-security-updates/

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

JSON

Related for CVELIST:CVE-2023-26496