PT-2022-25094 · Samsung · Exynos Baseband

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue is related to improper authentication in the Exynos baseband, which allows a remote attacker to disable network traffic encryption between the User Equipment UE a...

PT-2022-25095 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue concerns improper authorization, allowing a remote attacker to obtain sensitive information, including the IMEI, via an emergency call. Recommendations: For...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39902

The CVE-2022-39902 entry concerns Samsung Exynos baseband prior to SMR DEC-2022 Release 1, with improper authorization allowing a remote attacker to obtain sensitive data (including IMEI) via an emergency call. The vulnerability arises from insufficient access restrictions in the baseband compone...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR DEC-2022 Release 1 prior to Release 1, which stems from improper Exynos authorization...

SAMSUNG Mobile devices 授权问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR DEC-2022 Release 1 prior versions, which stems from incorrect Exynos authentication...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

CVE-2022-39881

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...

Input validation

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...

CVE-2022-39881

The CVE-2022-39881 entry concerns Samsung Exynos modems with an improper input validation vulnerability in processing the SIB12 PDU, leading to potential out-of-bounds memory reads. Affected are Exynos modem components prior to the SMR Sep-2022 Release. The connected sources indicate a remoteabil...

SAMSUNG Mobile devices 缓冲区错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1, which stems from an input validation vulnerability in the processing of the SIB...

CVE-2022-39881

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...

CVE-2022-39881

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...

PT-2022-25074 · Samsung · Exynos Modem

Name of the Vulnerable Software and Affected Versions: Exynos modems versions prior to SMR Sep-2022 Release Description: The issue is related to an improper input validation vulnerability for processing SIB12 PDU in Exynos modems. This allows a remote attacker to read out of bounds memory...

A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain

Posted by Maddie Stone, Project Zero Note: The three vulnerabilities discussed in this blog were all fixed in Samsung’s March 2021 release. They were fixed as CVE-2021-25337, CVE-2021-25369, CVE-2021-25370. To ensure your Samsung device is up-to-date under settings you can check that your device ...

PT-2022-14597 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write due to a use after free in the exynos5 i2c irq function. This could lead to local escalation of privilege with System execution privileges needed. User...

GSD-2022-1004935 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004885 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.286 by commit...

GSD-2022-1004823 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.250 by commit...