CVE-2023-26076 | Severity.io

Description

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved options.

Related CPE's

exynos_1280_firmware

Vulnerable

exynos_2200_firmware

Vulnerable

exynos_modem_5123_firmware

Vulnerable

exynos_modem_5123

exynos_modem_5300_firmware

Vulnerable

exynos_modem_5300

exynos_auto_t5123_firmware

Vulnerable

exynos_auto_t5123

References

http://packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html

https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html

https://semiconductor.samsung.com/processor/mobile-processor/

Product

https://semiconductor.samsung.com/processor/modem/

Product

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vendor Advisory

http://packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html

https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html

https://semiconductor.samsung.com/processor/mobile-processor/

Product

https://semiconductor.samsung.com/processor/modem/

Product

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vendor Advisory

Weaknesses

[email protected]

Primary

CWE-120

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary

CWE-120

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

7.6 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-03-13T14:15:12.720Z

3 years ago

Last modified

2025-03-03T17:15:27.330Z

1 year ago