{"id":"CVE-2023-26497","aliases":["A-274464337","EUVD-2023-30296","GHSA-jwq6-h4wr-9gcc","PUB-A-274464337"],"status":"published","title":"An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem...","description":"An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.21443,"percentile":0.97644,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-03-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2023-03-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2023-03-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"samsung","product":"exynos_1080_firmware"},{"vendor":"samsung","product":"exynos_980_firmware"},{"vendor":"samsung","product":"exynos_auto_t5123_firmware"},{"vendor":"samsung","product":"exynos_modem_5123_firmware"},{"vendor":"samsung","product":"exynos_modem_5300_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/processor/modem/","tags":["x_transferred","Product"]},{"url":"https://semiconductor.samsung.com/processor/mobile-processor/","tags":["x_transferred","Product"]},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26497"},{"url":"https://semiconductor.samsung.com/processor/mobile-processor"},{"url":"https://semiconductor.samsung.com/processor/modem"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://github.com/advisories/GHSA-jwq6-h4wr-9gcc"},{"url":"https://source.android.com/security/bulletin/2023-03-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-26497","description":"An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute.","status":"published","published":"2023-03-21T00:00:00Z","modified":"2025-02-26T18:31:19.945Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-30296","description":"An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute.","status":"published","published":"2023-03-21T00:00:00Z","modified":"2025-02-26T18:31:19Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N","level":"high"}],"updated_at":"2026-11-02T20:53:22.849013Z"}],"ghsa":[{"id":"GHSA-jwq6-h4wr-9gcc","title":"An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem...","description":"An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute.","status":"published","published":"2023-03-22T00:30:20Z","modified":"2025-02-26T21:31:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:00:03.81346Z"}],"nvd":[{"id":"CVE-2023-26497","description":"An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute.","status":"published","published":"2023-03-21T22:15:12.21Z","modified":"2026-06-17T05:43:28.217Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:50.908252Z"}],"osv":[{"id":"PUB-A-274464337","description":"In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-03-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:08.76702Z"}]}}