CVE-2023-21494: Buffer Overflow
First published: Thu May 04 2023(Updated: )
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
Credit: mobile.security@samsung.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samsung Android | =13.0 | |
| Samsung Android | =13.0-smr-apr-2023-r1 | |
| Samsung Android | =13.0-smr-dec-2022-r1 | |
| Samsung Android | =13.0-smr-feb-2023-r1 | |
| Samsung Android | =13.0-smr-jan-2023-r1 | |
| Samsung Android | =13.0-smr-mar-2023-r1 | |
| Samsung Android | =13.0-smr-nov-2022-r1 | |
| Samsung Android | =13.0-smr-oct-2022-r1 | |
| Samsung Exynos |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-21494?
CVE-2023-21494 is a potential buffer overflow vulnerability in the auth API in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1.
Is CVE-2023-21494 critical?
Yes, CVE-2023-21494 has a severity value of 9.8, which is considered critical.
How does CVE-2023-21494 affect Samsung Android?
CVE-2023-21494 affects Samsung Android versions 13.0 and prior to SMR May-2023 Release 1.
How can remote attackers exploit CVE-2023-21494?
Remote attackers can exploit CVE-2023-21494 to cause invalid memory access.
Where can I find more information about CVE-2023-21494?
You can find more information about CVE-2023-21494 at the following reference link: [https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05](https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05)
- collector/nvd-latest
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/samsung
- canonical/samsung android
- version/samsung android/13.0
- version/samsung android/13.0-smr-apr-2023-r1
- version/samsung android/13.0-smr-dec-2022-r1
- version/samsung android/13.0-smr-feb-2023-r1
- version/samsung android/13.0-smr-jan-2023-r1
- version/samsung android/13.0-smr-mar-2023-r1
- version/samsung android/13.0-smr-nov-2022-r1
- version/samsung android/13.0-smr-oct-2022-r1
- canonical/samsung exynos