CVE-2023-26073

CVE-2023-26073 refers to a heap-based buffer overflow in the 5G MM message codec of Samsung Exynos modems (including Exynos 850, 980, 1080, 1280, 2200, Exynos Modem 5123/5300, Exynos Auto T5123). Root cause: insufficient parameter validation when decoding the extended emergency number list. Affec...

CVE-2023-26072

CVE-2023-26072 is a heap-based buffer overflow in the 5G MM message codec of Samsung Exynos mobile baseband/modem chipsets (including Exynos 850, 980, 1080, 1280, 2200, Exynos Modem 5123/5300, and Exynos Auto T5123). The root cause is insufficient parameter validation when decoding the Emergency ...

CVE-2023-26074

CVE-2023-26074 is a heap-based buffer overflow in the 5G MM message codec of Samsung Exynos mobile/baseband modems (including Exynos 850/980/1080/1280/2200 and Exynos Modem 5123/5300; Exynos Auto T5123 is mentioned in related material). Root cause: insufficient parameter validation when decoding ...

PT-2023-20468

Name of the Vulnerable Software and Affected Versions Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, Exynos Auto T5123, and Exynos W920 affected versions not specified Description A...

CVE-2023-26076: Buffer Copy without Checking Size of Input

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

Input validation

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

CVE-2023-26075

CVE-2023-26075 is an intra-object overflow in the 5G MM message codec of Samsung Exynos modems (Exynos 850/980/1080/1280/2200; Exynos Modem 5123/5300; Exynos Auto T5123) caused by insufficient parameter validation when decoding the Service Area List. This affects Samsung Mobile Chipset and Baseba...

CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

CVE-2023-26075: Buffer Copy without Checking Size of Input

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter...

Debian: Security Advisory (DSA-1585-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GSD-2023-1002384 ALSA: hda: Do not unset preset when cleaning up codec

ALSA: hda: Do not unset preset when cleaning up codec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...

GSD-2023-1002357 ALSA: hda: Do not unset preset when cleaning up codec

ALSA: hda: Do not unset preset when cleaning up codec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...

PT-2023-35400 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to the ALSA hda codec, where the preset is not unset when cleaning up the codec. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-35459

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.169 Description The issue is related to the ALSA hda codec, where the preset is not unset when cleaning up. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

Libde265 security vulnerabilities

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version 1.0.9, which stems from a buffer overflow issue...

CVE-2023-20933

In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-...

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

APT Earth Kitsune delivers new WhiskerSpy malware via watering hole attack

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Earth Kitsune, an advanced persistent threat APT actor known for targeting individuals interested in North Korea, also China, Brazil, and Japan and has been found to be using a new backdoor called...