CVE-2022-23425: Input Validation
Published Feb 11, 2022
·Updated
Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.
Affected Software
4 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
Samsung Exynos
Event History
Feb 11, 2022
CVE Published
via MITRE·05:40 PM
Data Sourced
via MITRE·05:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-23425 vulnerability?
CVE-2022-23425 is an improper input validation vulnerability in Exynos baseband prior to SMR Feb-2022 Release 1, allowing attackers to send arbitrary NAS signaling messages with fake base station.
2
Which software versions are affected by CVE-2022-23425?
Google Android versions 10.0, 11.0, and 12.0 are affected by CVE-2022-23425.
3
What is the severity of CVE-2022-23425?
The severity of CVE-2022-23425 is critical with a CVSS score of 9.8.
4
How can I fix CVE-2022-23425?
To fix CVE-2022-23425, users should apply the SMR Feb-2022 Release 1 security update provided by Samsung or follow the instructions from their device manufacturer.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-23425?
The Common Weakness Enumeration (CWE) ID for CVE-2022-23425 is CWE-20.