PT-2023-20688 · Samsung · Exynos Modem 5300+4

Published 2023-03-23 · Updated 2026-02-09 · CVE-2023-26498

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Samsung Baseband Modem Chipset for Exynos Modem 5123 Samsung Baseband Modem Chipset for Exynos Modem 5300 Samsung Baseband Modem Chipset for Exynos 980 Samsung Baseband Modem Chipset for Exynos 1080 Samsung Baseband Modem Chipset for Exynos Auto T5126

Description An issue in the SDP module can cause memory corruption due to improper checking of the number of properties while parsing the chatroom attribute.

Recommendations For Samsung Baseband Modem Chipset for Exynos Modem 5123, update the SDP module to properly check the number of properties. For Samsung Baseband Modem Chipset for Exynos Modem 5300, update the SDP module to properly check the number of properties. For Samsung Baseband Modem Chipset for Exynos 980, update the SDP module to properly check the number of properties. For Samsung Baseband Modem Chipset for Exynos 1080, update the SDP module to properly check the number of properties. For Samsung Baseband Modem Chipset for Exynos Auto T5126, update the SDP module to properly check the number of properties.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-26498

Affected Products

Exynos 1080

Exynos 980

Exynos Auto T5126

Exynos Modem 5123

Exynos Modem 5300

References · 5

• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26498 · Security Note
• https://semiconductor.samsung.com/processor/modem · Note
• https://reddit.com/r/SimpleGoDev/comments/1r001ly/security_through_reduction_simplego_versus · Reddit Post
• https://semiconductor.samsung.com/processor/mobile-processor · Note