CVE-2023-26076
First published: Mon Mar 13 2023(Updated: )
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved options.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samsung Exynos 1280 Firmware | ||
| Samsung Exynos 1280 | ||
| Samsung Exynos 2200 Firmware | ||
| Samsung Exynos 2200 | ||
| Samsung Exynos Modem 5123 Firmware | ||
| Samsung Exynos Modem 5123 | ||
| Samsung Exynos Modem 5300 Firmware | ||
| Samsung Exynos Modem 5300 | ||
| Samsung Exynos Auto T5123 Firmware | ||
| Samsung Exynos Auto T5123 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html
- https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html
- https://semiconductor.samsung.com/processor/mobile-processor/
- https://semiconductor.samsung.com/processor/modem/
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/
Frequently Asked Questions
What is CVE-2023-26076?
CVE-2023-26076 is an issue discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved option.
How severe is CVE-2023-26076?
CVE-2023-26076 is classified as a critical vulnerability with a severity score of 9.8 out of 10.
Which software versions are affected by CVE-2023-26076?
CVE-2023-26076 affects Samsung Exynos 1280 Firmware, Samsung Exynos 2200 Firmware, Samsung Exynos Modem 5123 Firmware, Samsung Exynos Modem 5300 Firmware, and Samsung Exynos Auto T5123 Firmware.
How can I fix CVE-2023-26076?
There is no specific fix available for CVE-2023-26076 at the moment. It is recommended to follow the guidance provided by Samsung and apply any security patches or updates they release.
Where can I find more information about CVE-2023-26076?
You can find more information about CVE-2023-26076 at the following references: [Packet Storm Security](http://packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html), [Google Project Zero](https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html), [Samsung Semiconductor](https://semiconductor.samsung.com/processor/mobile-processor/).
- collector/nvd-index
- agent/author
- vendor/samsung
- canonical/samsung exynos 1280 firmware
- canonical/samsung exynos 1280
- canonical/samsung exynos 2200 firmware
- canonical/samsung exynos 2200
- canonical/samsung exynos modem 5123 firmware
- canonical/samsung exynos modem 5123
- canonical/samsung exynos modem 5300 firmware
- canonical/samsung exynos modem 5300
- canonical/samsung exynos auto t5123 firmware
- canonical/samsung exynos auto t5123