CVE-2023-50806: Buffer Overflow
A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850 Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300 that allows out-of-bounds access to a heap buffer in the SIM Proactive Command.
Other sources
In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50806?
CVE-2023-50806 has been classified with a high-severity rating due to potential exploitation risks.
How do I fix CVE-2023-50806?
To mitigate CVE-2023-50806, update your device firmware to the latest version provided by Samsung.
Which devices are affected by CVE-2023-50806?
CVE-2023-50806 affects a range of Samsung Exynos processors, including Exynos 9820, Exynos 9825, and Exynos 2100 among others.
Is there an exploit available for CVE-2023-50806?
Currently, specific details about exploit availability for CVE-2023-50806 are not publicly disclosed.
What are the potential consequences of CVE-2023-50806?
Exploitation of CVE-2023-50806 could lead to unauthorized access and control over affected devices.