PT-2023-20472 · Samsung · Exynos 2200+4

Published 2023-03-13 · Updated 2025-03-03 · CVE-2023-26076

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AC:L/AV:N/A:H/C:L/I:L/PR:L/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 2200 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem 5123 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem 5300 Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Auto T5123

Description An issue was discovered in the 5G SM message codec due to insufficient parameter validation when decoding reserved options, which can cause an intra-object overflow.

Recommendations For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, consider disabling the 5G SM message codec until a patch is available. For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 2200, consider disabling the 5G SM message codec until a patch is available. For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem 5123, consider disabling the 5G SM message codec until a patch is available. For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Modem 5300, consider disabling the 5G SM message codec until a patch is available. For Samsung Mobile Chipset and Baseband Modem Chipset for Exynos Auto T5123, consider disabling the 5G SM message codec until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2023-26076

Affected Products

Exynos 1280

Exynos 2200

Exynos Auto T5123

Exynos Modem 5123

Exynos Modem 5300

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-26076 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• http://packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html · Note
• https://t.me/cibsecurity/59905 · Telegram Post
• https://t.me/cvenotify/46360 · Telegram Post
• https://semiconductor.samsung.com/processor/mobile-processor · Note
• https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html · Note
• https://t.me/cvenotify/113192 · Telegram Post
• https://semiconductor.samsung.com/processor/modem · Note