CVE-2023-21517

Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code.
Configurations

Configuration 1 (hide)

cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:42

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.8
v2 : unknown
v3 : 8.8
References () https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06 - Vendor Advisory () https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06 - Vendor Advisory

07 Jul 2023, 13:12

Type Values Removed Values Added
References (MISC) https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06 - (MISC) https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Samsung exynos
Samsung
CPE cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*
CWE CWE-787

28 Jun 2023, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-06-28 21:15

Updated : 2024-11-21 07:42


NVD link : CVE-2023-21517

Mitre link : CVE-2023-21517

CVE.ORG link : CVE-2023-21517


JSON object : View

Products Affected

samsung

  • exynos
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-787

Out-of-bounds Write