{"id":"CVE-2023-24033","aliases":["A-265822830","EUVD-2023-28097","GHSA-5pgr-37hm-gqpw","PUB-A-265822830"],"status":"published","title":"The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512...","description":"The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.32934,"percentile":0.98369,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2023-03-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2023-03-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2023-03-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"samsung","product":"exynos_1080_firmware"},{"vendor":"samsung","product":"exynos_980_firmware"},{"vendor":"samsung","product":"exynos_auto_t5123_firmware"},{"vendor":"samsung","product":"exynos_modem_5123_firmware"},{"vendor":"samsung","product":"exynos_modem_5300_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/processor/modem/","tags":["x_transferred","Product"]},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/172137/Shannon-Baseband-accept-type-SDP-Attribute-Memory-Corruption.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24033"},{"url":"https://semiconductor.samsung.com/processor/modem"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://github.com/advisories/GHSA-5pgr-37hm-gqpw"},{"url":"https://source.android.com/security/bulletin/2023-03-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-24033","description":"The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.","status":"published","published":"2023-03-13T00:00:00Z","modified":"2025-03-03T20:24:55.993Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:27.006218Z"}],"euvd":[{"id":"EUVD-2023-28097","description":"The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.","status":"published","published":"2023-03-13T00:00:00Z","modified":"2025-03-03T20:24:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N","level":"high"}],"updated_at":"2026-11-02T20:53:18.061162Z"}],"ghsa":[{"id":"GHSA-5pgr-37hm-gqpw","title":"The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512...","description":"The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.","status":"published","published":"2023-03-13T12:30:17Z","modified":"2025-03-03T21:31:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:00:07.927723Z"}],"nvd":[{"id":"CVE-2023-24033","description":"The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.","status":"published","published":"2023-03-13T12:15:11.16Z","modified":"2026-06-17T05:38:31.48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:49.031498Z"}],"osv":[{"id":"PUB-A-265822830","description":"In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-03-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:05:56.917158Z"}]}}