Intra-object Overflow Vulnerability in Samsung Mobile Chipset and Baseband Modem

CVE-2023-26076

Summary

A vulnerability has been identified within the Samsung Mobile Chipset and Baseband Modem family, specifically impacting the Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. This issue arises from an intra-object overflow within the 5G SM message codec, caused by a lack of adequate parameter validation when decoding reserved options. This deficiency poses a risk as it can lead to potential exploitation if not addressed. Mitigating strategies and updates from Samsung are essential to enhance security and protect users.

References