CVE-2023-24033

HIGH

Samsung Exynos Modem 5123, 5300, 980, 1080, and Auto T5123 Firmware - Denial of Service via SDP Format Type Mismatch

Title source: llm

Description

The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.

References (3)

Core 3

Core References

Product

https://semiconductor.samsung.com/processor/modem/

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Exploit, Third Party Advisory

http://packetstormsecurity.com/files/172137/Shannon-Baseband-accept-type-SDP-Attribute-Memory-Corruption.html

Scores

CVSS v3 7.5

EPSS 0.0042

EPSS Percentile 62.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (5)

samsung/exynos_1080_firmware

samsung/exynos_980_firmware

samsung/exynos_auto_t5123_firmware

samsung/exynos_modem_5123_firmware

samsung/exynos_modem_5300_firmware

Published Mar 13, 2023

Tracked Since Feb 18, 2026