CVE-2023-50805: Buffer Overflow
A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth).
Other sources
In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50805?
CVE-2023-50805 has been classified with a high severity due to potential impacts on device security.
How do I fix CVE-2023-50805?
To fix CVE-2023-50805, users should update their devices to the latest firmware released by Samsung.
Which devices are affected by CVE-2023-50805?
CVE-2023-50805 affects various Samsung Mobile Processors, Wearable Processors, and Modems including models such as Exynos 9820, Exynos 9825, and Exynos W930.
What types of vulnerabilities does CVE-2023-50805 expose?
CVE-2023-50805 primarily exposes devices to potential exploitation that could lead to unauthorized access or data leakage.
Is CVE-2023-50805 being actively exploited in the wild?
As of now, there is no public information indicating that CVE-2023-50805 is being actively exploited.