PT-2023-20469 · Samsung · Exynos

Published 2023-03-13 · Updated 2025-03-03 · CVE-2023-26073

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Samsung Mobile Chipset and Baseband Modem Chipset for Exynos versions 850 through 2200 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem versions 5123 through 5300 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Auto version T5123 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos W920 version

Description A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the extended emergency number list.

Recommendations For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos versions 850 through 2200, update to a version that includes a fix for the heap-based buffer overflow issue. For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem versions 5123 through 5300, update to a version that includes a fix for the heap-based buffer overflow issue. For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Auto version T5123, update to a version that includes a fix for the heap-based buffer overflow issue. For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos W920 version, update to a version that includes a fix for the heap-based buffer overflow issue. As a temporary workaround, consider disabling the 5G MM message codec until a patch is available.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-26073

Affected Products

Exynos

References · 11

• 🔥 https://project-zero.issues.chromium.org/issues/42451535 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-26073 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://t.me/cvenotify/46361 · Telegram Post
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2396 · Note
• https://t.me/cibsecurity/59896 · Telegram Post
• https://semiconductor.samsung.com/processor/mobile-processor · Note
• http://packetstormsecurity.com/files/171380/Shannon-Baseband-NrmmMsgCodec-Extended-Emergency-Number-List-Heap-Buffer-Overflow.html · Note
• https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html · Note
• https://t.me/cvenotify/113233 · Telegram Post
• https://semiconductor.samsung.com/processor/modem · Note