CVE-2023-26076

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved...

CVE-2023-26074

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123.. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient...

SAMSUNG Mobile Chipset 安全漏洞

SAMSUNG Mobile Chipset is a series of chips from the South Korean company Samsung SAMSUNG. A security vulnerability exists in the Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, Exynos Auto T5123 of the SAMSUNG Mobile Chipset and Baseband Modem Chipset, which stems from inadequate...

CVE-2023-24033

CVE-2023-24033 concerns Samsung Exynos Modem baseband chips (e.g., Exynos Modem 5123/5300, Exynos 980/1080, Exynos Auto T512) where the SDP format-type checks are flawed, enabling network-based DoS or remote code execution without user interaction on affected devices. Public disclosures from Goog...

SAMSUNG Mobile Chipset 缓冲区错误漏洞

SAMSUNG Mobile Chipset is a series of chips from the South Korean company Samsung SAMSUNG. SAMSUNG Mobile Chipset and Baseband Modem Chipset's Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, Exynos Auto T5123, and Exynos W920 suffer from a buff...

CVE-2023-26074

CVE-2023-26074 is a heap-based buffer overflow in the 5G MM message codec of Samsung Exynos mobile/baseband modems (including Exynos 850/980/1080/1280/2200 and Exynos Modem 5123/5300; Exynos Auto T5123 is mentioned in related material). Root cause: insufficient parameter validation when decoding ...

CVE-2023-26072

CVE-2023-26072 is a heap-based buffer overflow in the 5G MM message codec of Samsung Exynos mobile baseband/modem chipsets (including Exynos 850, 980, 1080, 1280, 2200, Exynos Modem 5123/5300, and Exynos Auto T5123). The root cause is insufficient parameter validation when decoding the Emergency ...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

Input validation

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

PT-2023-20471 · Samsung · Exynos Auto T5123 +7

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 980 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1080 Samsung Mobile Chipset and Baseband Modem...

CVE-2023-26075

CVE-2023-26075 is an intra-object overflow in the 5G MM message codec of Samsung Exynos modems (Exynos 850/980/1080/1280/2200; Exynos Modem 5123/5300; Exynos Auto T5123) caused by insufficient parameter validation when decoding the Service Area List. This affects Samsung Mobile Chipset and Baseba...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

PT-2023-3382 · Samsung · Exynos Modem 5300 +5

Name of the Vulnerable Software and Affected Versions: Exynos Modem 5123 Exynos Modem 5300 Exynos 980 Exynos 1080 Exynos 9110 Exynos Auto T5123 Description: The issue is related to a buffer overflow when decoding an SIP status line, potentially allowing a remote attacker to cause a denial of...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

Authorization

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

Authentication flaw

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

PT-2022-25095 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue concerns improper authorization, allowing a remote attacker to obtain sensitive information, including the IMEI, via an emergency call. Recommendations: For...

CVE-2022-39901

CVE-2022-39901 affects Samsung Exynos baseband (Lassen baseband) prior to SMR DEC-2022 Release 1. The issue is improper authentication that allows a remote attacker to disable network traffic encryption between UE and gNodeB. Impact is described as high confidentiality risk with no integrity/avai...