by Kastro
Paper/Archive/CVE-2023-26496

CVE-2023-26496

mitre — An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos A…

EPSS 21%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.6.976 × 2019.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in the SDP (Session Description Protocol) module.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitre (CNA)8.6CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsemiconductor.samsung.com/processor/modemrefsemiconductor.samsung.com/processor/mobile-processorrefsemiconductor.samsung.com/support/quality-support/product-security-updates