PT-2024-13973 · Samsung · Exynos 9110+2

Dyon Goos + 1 · Published 2024-07-09 · Updated 2025-06-26 · CVE-2023-50807

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Samsung Wearable Processor and Modems versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300

Description A vulnerability was discovered that allows an out-of-bounds write in the heap in 2G, which does not require authentication.

Recommendations For versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-50807

Affected Products

Exynos 9110

Exynos Modem 5123

Exynos Modem 5300

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-50807 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2023-50807 · Vendor Advisory
• https://t.me/cvedetector/437 · Telegram Post
• https://t.me/cvenotify/85797 · Telegram Post
• https://t.me/cvenotify/126803 · Telegram Post
• https://twitter.com/CVEnew/status/1811062972929675377 · Twitter Post
• https://t.me/cvenotify/85598 · Telegram Post