CVE-2023-26073

CVE-2023-26073 refers to a heap-based buffer overflow in the 5G MM message codec of Samsung Exynos modems (including Exynos 850, 980, 1080, 1280, 2200, Exynos Modem 5123/5300, Exynos Auto T5123). Root cause: insufficient parameter validation when decoding the extended emergency number list. Affec...

SAMSUNG Mobile Chipset 安全漏洞

SAMSUNG Mobile Chipset is a series of chips from the South Korean company Samsung SAMSUNG. A security vulnerability exists in the Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, Exynos Auto T5123 of the SAMSUNG Mobile Chipset and Baseband Modem Chipset, which stems from inadequate...

CVE-2023-26074

CVE-2023-26074 is a heap-based buffer overflow in the 5G MM message codec of Samsung Exynos mobile/baseband modems (including Exynos 850/980/1080/1280/2200 and Exynos Modem 5123/5300; Exynos Auto T5123 is mentioned in related material). Root cause: insufficient parameter validation when decoding ...

CVE-2023-26072

CVE-2023-26072 is a heap-based buffer overflow in the 5G MM message codec of Samsung Exynos mobile baseband/modem chipsets (including Exynos 850, 980, 1080, 1280, 2200, Exynos Modem 5123/5300, and Exynos Auto T5123). The root cause is insufficient parameter validation when decoding the Emergency ...

CVE-2023-26075

creationtimestamp| type| source ---|---|--- 2023-03-10 20:21:13+00:00| seen| https://t.me/cibsecurity/59806 2023-03-16 18:07:00+00:00| seen| https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html 2025-03-02 11:44:19+00:00| seen|...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

Input validation

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

CVE-2023-26075

CVE-2023-26075 is an intra-object overflow in the 5G MM message codec of Samsung Exynos modems (Exynos 850/980/1080/1280/2200; Exynos Modem 5123/5300; Exynos Auto T5123) caused by insufficient parameter validation when decoding the Service Area List. This affects Samsung Mobile Chipset and Baseba...

SAMSUNG Mobile Chipset 安全漏洞

SAMSUNG Mobile Chipset is a family of chips from the South Korean company Samsung SAMSUNG. A security vulnerability exists in Samsung Mobile Chipset and Baseband Modem Chipset, which stems from insufficient parameter validation when decoding a list of service areas, which may result in an...

SUSE CVE-2021-31615

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window of the listening device before the transmitting device initiates its packet transmission to achieve full MITM status...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

Authentication flaw

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

Authorization

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

PT-2022-25095 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue concerns improper authorization, allowing a remote attacker to obtain sensitive information, including the IMEI, via an emergency call. Recommendations: For...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

PT-2022-25094 · Samsung · Exynos Baseband

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue is related to improper authentication in the Exynos baseband, which allows a remote attacker to disable network traffic encryption between the User Equipment UE a...

CVE-2022-39901

CVE-2022-39901 affects Samsung Exynos baseband (Lassen baseband) prior to SMR DEC-2022 Release 1. The issue is improper authentication that allows a remote attacker to disable network traffic encryption between UE and gNodeB. Impact is described as high confidentiality risk with no integrity/avai...

CVE-2022-39902

The CVE-2022-39902 entry concerns Samsung Exynos baseband prior to SMR DEC-2022 Release 1, with improper authorization allowing a remote attacker to obtain sensitive data (including IMEI) via an emergency call. The vulnerability arises from insufficient access restrictions in the baseband compone...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...