7.5
CWE
476
Advisory Published
Updated

CVE-2023-37368: Null Pointer Dereference

First published: Fri Sep 08 2023(Updated: )

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123). In the Shannon MM Task, Missing validation of a NULL pointer can cause abnormal termination via a malformed NR MM packet.

Credit: cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Samsung Exynos 9810 Firmware
Samsung Exynos 9810
Samsung Exynos 9610 Firmware
Samsung Exynos 9610
Samsung Exynos 9820 Firmware
Samsung Exynos 9820
Samsung Exynos 980 Firmware
Samsung Exynos 980
Samsung Exynos 850 Firmware
Samsung Exynos 850
Samsung Exynos 1080 Firmware
Samsung Exynos 1080
Samsung Exynos 2100 Firmware
Samsung Exynos 2100
Samsung Exynos 2200 Firmware
Samsung Exynos 2200
Samsung Exynos 1280 Firmware
Samsung Exynos 1280
Samsung Exynos 1380 Firmware
Samsung Exynos 1380
Samsung Exynos 1330 Firmware
Samsung Exynos 1330
Samsung Exynos 9110 Firmware
Samsung Exynos 9110
Samsung Exynos W920 Firmware
Samsung Exynos W920
Samsung Exynos Modem 5123 Firmware
Samsung Exynos Modem 5123
Samsung Exynos Modem 5300 Firmware
Samsung Exynos Modem 5300
Samsung Exynos Auto T5123 Firmware
Samsung Exynos Auto T5123

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2023-37368?

    The severity of CVE-2023-37368 is high (CVSS score of 7.5).

  • Which Samsung processors are affected by CVE-2023-37368?

    Samsung Exynos Mobile Processor, Automotive Processor, and Modem are affected by CVE-2023-37368.

  • What is the vulnerability ID for Samsung Exynos 9810 firmware?

    The vulnerability ID for Samsung Exynos 9810 firmware is CVE-2023-37368.

  • How can I fix the vulnerability in Samsung Exynos processors?

    Please refer to the official Samsung website for product security updates and patches.

  • Is Samsung Exynos 9610 vulnerable to CVE-2023-37368?

    No, Samsung Exynos 9610 is not vulnerable to CVE-2023-37368.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203