CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

Authentication flaw

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

Authorization

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39901

CVE-2022-39901 affects Samsung Exynos baseband (Lassen baseband) prior to SMR DEC-2022 Release 1. The issue is improper authentication that allows a remote attacker to disable network traffic encryption between UE and gNodeB. Impact is described as high confidentiality risk with no integrity/avai...

PT-2022-25095 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue concerns improper authorization, allowing a remote attacker to obtain sensitive information, including the IMEI, via an emergency call. Recommendations: For...

PT-2022-25094 · Samsung · Exynos Baseband

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue is related to improper authentication in the Exynos baseband, which allows a remote attacker to disable network traffic encryption between the User Equipment UE a...

CVE-2022-39902

The CVE-2022-39902 entry concerns Samsung Exynos baseband prior to SMR DEC-2022 Release 1, with improper authorization allowing a remote attacker to obtain sensitive data (including IMEI) via an emergency call. The vulnerability arises from insufficient access restrictions in the baseband compone...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

Samsung SMR Heap Buffer Overflow Vulnerability

Samsung SMR is a system patch kit introduced by Samsung Electronics in South Korea, which is mainly used to provide patches for Samsung cell phone applications. Samsung SMR suffers from a heap buffer overflow vulnerability that stems from incorrect input validation in the baseband, and no details...

CVE-2022-33719

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow...

CVE-2022-33719

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow...

CVE-2022-33719

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow...

Integer overflow

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow...

CVE-2022-33719

CVE-2022-33719 affects Samsung baseband prior to SMR Aug-2022 Release 1, where improper input validation can cause an integer overflow that leads to a heap overflow. The issue is tied to the baseband component and is mitigated by upgrading to SMR Aug-2022 Release 1 or later. Documentation does no...

CVE-2022-33719

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow...

SAMSUNG Mobile devices 输入验证错误漏洞

Samsung SMR is a system patch kit introduced by Samsung Electronics in South Korea, which is mainly used to provide patches for Samsung cell phone applications. Samsung SMR suffers from a heap buffer overflow vulnerability that stems from incorrect input validation in the baseband, and no details...