The Bug Report - March 2023 Edition

The Bug Report – March 2023 Edition By Trellix · April 05, 2023 This story was also written by Kasimir Schulz. It really is bussin, though. Why am I here? Welcome back to the Bug Report, Ides of March edition! Last month was highlighted by glimpses into the past, with a historic attack technique...

CVE-2023-24033

creationtimestamp| type| source ---|---|--- 2023-03-13 15:53:22+00:00| seen| https://t.me/cibsecurity/59888 2023-03-16 18:07:00+00:00| seen| https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html 2023-03-17 15:00:08+00:00| seen| https://t.me/truesecator/4181...

CVE-2023-24033

The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol SDP module, which can lead to a denial of service...

CVE-2023-24033

CVE-2023-24033 concerns Samsung Exynos Modem baseband chips (e.g., Exynos Modem 5123/5300, Exynos 980/1080, Exynos Auto T512) where the SDP format-type checks are flawed, enabling network-based DoS or remote code execution without user interaction on affected devices. Public disclosures from Goog...