{"id":"CVE-2023-28613","aliases":["A-269655868","EUVD-2023-32281","GHSA-v2w5-mxw3-ccwc","PUB-A-269655868"],"status":"published","title":"An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for...","description":"An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01162,"percentile":0.67425,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2023-04-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2023-04-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2023-04-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"samsung","product":"exynos_1280_firmware"},{"vendor":"samsung","product":"exynos_2200_firmware"},{"vendor":"samsung","product":"exynos_modem_5300_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/processor/modem/","tags":["x_transferred","Product"]},{"url":"https://semiconductor.samsung.com/processor/mobile-processor/","tags":["x_transferred","Product"]},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/172177/Shannon-Baseband-Integer-Overflow.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28613"},{"url":"https://semiconductor.samsung.com/processor/mobile-processor"},{"url":"https://semiconductor.samsung.com/processor/modem"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://github.com/advisories/GHSA-v2w5-mxw3-ccwc"},{"url":"https://source.android.com/security/bulletin/2023-04-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-28613","description":"An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.","status":"published","published":"2023-04-04T00:00:00Z","modified":"2025-02-13T16:33:38.886Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:32.376766Z"}],"euvd":[{"id":"EUVD-2023-32281","description":"An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.","status":"published","published":"2023-04-04T00:00:00Z","modified":"2025-02-13T16:33:38Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N","level":"medium"}],"updated_at":"2026-11-03T00:03:52.297177Z"}],"ghsa":[{"id":"GHSA-v2w5-mxw3-ccwc","title":"An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for...","description":"An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.","status":"published","published":"2023-04-04T18:30:21Z","modified":"2025-02-13T18:31:29Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:59:55.900946Z"}],"nvd":[{"id":"CVE-2023-28613","description":"An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.","status":"published","published":"2023-04-04T16:15:07.407Z","modified":"2026-06-17T05:48:23.563Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:51.883939Z"}],"osv":[{"id":"PUB-A-269655868","description":"In TBD of sv_SmdtIp4Rx.cpp, there is a possible TBD due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-04-01T00:00:00Z","modified":"2026-11-09T16:40:10.884737887Z","updated_at":"2026-11-09T17:05:56.917158Z"}]}}