CVE-2023-50807: Buffer Overflow
A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth).
Other sources
In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50807?
CVE-2023-50807 has a significant severity rating due to the potential for out-of-bounds writes in the heap.
How do I fix CVE-2023-50807?
To fix CVE-2023-50807, you should update the firmware of affected Samsung Wearable Processors and Modems to the latest version available.
What products are affected by CVE-2023-50807?
CVE-2023-50807 affects Samsung Wearable Processor and Modems, specifically Exynos 9110, Exynos Modem 5123, and Exynos Modem 5300.
What type of vulnerability is CVE-2023-50807?
CVE-2023-50807 is classified as an out-of-bounds write vulnerability.
Is authentication required to exploit CVE-2023-50807?
No, CVE-2023-50807 can be exploited without authentication.