Exynos Mobile and Wearable Processors Vulnerability in Samsung Products
CVE-2023-49927

5.3MEDIUM

Key Information:

Vendor
Samsung
Vendor
CVE Published:
5 June 2024

Summary

A vulnerability has been identified in Samsung's Exynos processor line, specifically impacting mobile processors and wearable devices. The issue arises from insufficient verification of format types within the baseband software related to the Radio Resource Control (RRC). This flaw may compromise encryption security, potentially exposing sensitive data. Affected products include a range of Exynos chips, from older models like the Exynos 9110 to newer ones like the Exynos 2200. Users and developers should take immediate action to safeguard against possible exploitation.

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.