PT-2023-20471 · Samsung · Exynos 2200+7

Published 2023-03-10 · Updated 2025-02-27 · CVE-2023-26075

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 980 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1080 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 2200 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem 5123 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem 5300 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Auto T5123

Description An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Service Area List.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2023-26075

Affected Products

Exynos 1080

Exynos 1280

Exynos 2200

Exynos 850

Exynos 980

Exynos Auto T5123

Exynos Modem 5123

Exynos Modem 5300

References · 11

• 🔥 https://project-zero.issues.chromium.org/issues/42451537 · Exploit
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26075 · Security Note
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2398 · Note
• https://t.me/cvenotify/112690 · Telegram Post
• https://t.me/cvenotify/46357 · Telegram Post
• https://t.me/cibsecurity/59806 · Telegram Post
• https://semiconductor.samsung.com/processor/mobile-processor · Note
• http://packetstormsecurity.com/files/171387/Shannon-Baseband-NrmmMsgCodec-Intra-Object-Overflow.html · Note
• https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html · Note
• https://semiconductor.samsung.com/processor/modem · Note