PT-2020-8701 · Samsung · Exynos+1

Published 2020-04-08 · Updated 2020-04-13 · CVE-2018-21057

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) Samsung mobile devices with O(8.x) Samsung mobile devices with P(9.0)

Description An issue was discovered in Samsung mobile devices with Exynos chipsets, specifically a stack-based buffer overflow in the Shannon Baseband.

Recommendations For Samsung mobile devices with N(7.x), update to a version that fixes the issue. For Samsung mobile devices with O(8.x), update to a version that fixes the issue. For Samsung mobile devices with P(9.0), update to a version that fixes the issue. As a temporary workaround, consider disabling the Shannon Baseband functionality until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-21057

Affected Products

Exynos

Shannon Baseband

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-21057 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-21057 · Vendor Advisory
• https://t.me/cibsecurity/11179 · Telegram Post