PT-2023-21847 · Samsung · Exynos 1280+2

Published 2023-04-04 · Updated 2023-05-05 · CVE-2023-28613

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300

Description An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2023-28613

Affected Products

Exynos 1280

Exynos 2200

Exynos Modem 5300

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-28613 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• http://packetstormsecurity.com/files/172177/Shannon-Baseband-Integer-Overflow.html · Note
• https://t.me/cvenotify/47509 · Telegram Post
• https://t.me/cibsecurity/61415 · Telegram Post
• https://t.me/cvenotify/47994 · Telegram Post
• https://semiconductor.samsung.com/processor/mobile-processor · Note
• https://semiconductor.samsung.com/processor/modem · Note