Lucene search

[email protected]NVD:CVE-2023-37368

HistorySep 08, 2023 - 3:15 a.m.

CVE-2023-37368

2023-09-0803:15:08

CWE-476

[email protected]

web.nvd.nist.gov

cve-2023-37368

samsung exynos

shannon mm task

null pointer validation

abnormal termination

nr mm packet

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123). In the Shannon MM Task, Missing validation of a NULL pointer can cause abnormal termination via a malformed NR MM packet.

Affected configurations

NVD

Node

samsungexynos_9810_firmwareMatch-

AND

samsungexynos_9810Match-

Node

samsungexynos_9610_firmwareMatch-

AND

samsungexynos_9610Match-

Node

samsungexynos_9820_firmwareMatch-

AND

samsungexynos_9820Match-

Node

samsungexynos_980_firmwareMatch-

AND

samsungexynos_980Match-

Node

samsungexynos_850_firmwareMatch-

AND

samsungexynos_850Match-

Node

samsungexynos_1080_firmwareMatch-

AND

samsungexynos_1080Match-

Node

samsungexynos_2100_firmwareMatch-

AND

samsungexynos_2100Match-

Node

samsungexynos_2200_firmwareMatch-

AND

samsungexynos_2200Match-

Node

samsungexynos_1280_firmwareMatch-

AND

samsungexynos_1280Match-

Node

samsungexynos_1380_firmwareMatch-

AND

samsungexynos_1380Match-

Node

samsungexynos_1330_firmwareMatch-

AND

samsungexynos_1330Match-

Node

samsungexynos_9110_firmwareMatch-

AND

samsungexynos_9110Match-

Node

samsungexynos_w920_firmwareMatch-

AND

samsungexynos_w920Match-

Node

samsungexynos_modem_5123_firmwareMatch-

AND

samsungexynos_modem_5123Match-

Node

samsungexynos_modem_5300_firmwareMatch-

AND

samsungexynos_modem_5300Match-

Node

samsungexynos_auto_t5123_firmwareMatch-

AND

samsungexynos_auto_t5123Match-

References

semiconductor.samsung.com/support/quality-support/product-security-updates/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

Related for NVD:CVE-2023-37368

cvelist1 prion1 cve1