MEDIUM · 6.8

CVE-2023-29086

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory...

Vulnerability Description

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Min-SE header.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
SamsungExynos 5300 Firmware-
SamsungExynos 5300-
SamsungExynos 5123 Firmware-
SamsungExynos 5123-
SamsungExynos 980 Firmware-
SamsungExynos 980-
SamsungExynos 9110 Firmware-
SamsungExynos 9110-
SamsungExynos 1080 Firmware-
SamsungExynos 1080-
SamsungExynos Auto T5123 Firmware-
SamsungExynos Auto T5123-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-29086?

CVE-2023-29086 is a vulnerability with a CVSS score of 6.8 (MEDIUM). An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory...

How severe is CVE-2023-29086?

CVE-2023-29086 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-29086?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Exynos 5300 Firmware, Samsung Exynos 5300, Samsung Exynos 5123 Firmware, Samsung Exynos 5123, Samsung Exynos 980 Firmware.