by Kastro
Paper/Archive/CVE-2023-26498

CVE-2023-26498

mitre — An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto…

EPSS 21%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.6.976 × 2019.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corruption can occur due to improper checking of the number of properties while parsing the chatroom attribute in the SDP (Session Description Protocol) module.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitre (CNA)8.6CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsemiconductor.samsung.com/processor/modemrefsemiconductor.samsung.com/processor/mobile-processorrefsemiconductor.samsung.com/support/quality-support/product-security-updates