PT-2023-20471 · Samsung · Exynos 2200+7

Publicado

2023-03-10

·

Atualizado

2025-02-27

·

CVE-2023-26075

CVSS v3.1

7.6

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 980 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1080 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 2200 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem 5123 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem 5300 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Auto T5123
Description An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Service Area List.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2023-26075

Produtos afetados

Exynos 1080
Exynos 1280
Exynos 2200
Exynos 850
Exynos 980
Exynos Auto T5123
Exynos Modem 5123
Exynos Modem 5300