CVEvulnerability
CVE-2023-28613
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-04-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-190
Description
An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.
Affected configurations
• samsung exynos 1280 firmware
• samsung exynos 2200 firmware
• samsung exynos modem 5300 firmware
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://packetstormsecurity.com/files/172177/Shannon-Baseband-Integer-Overflow.html packetstormsecurity.com
- https://semiconductor.samsung.com/processor/mobile-processor/ Product
- https://semiconductor.samsung.com/processor/modem/ Product
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory
- http://packetstormsecurity.com/files/172177/Shannon-Baseband-Integer-Overflow.html packetstormsecurity.com
- https://semiconductor.samsung.com/processor/mobile-processor/ Product
- https://semiconductor.samsung.com/processor/modem/ Product
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory