{"id":"CVE-2023-36481","aliases":["A-298187929","EUVD-2023-40430","GHSA-hqgq-fhhv-vxj3","PUB-A-298187929"],"status":"published","title":"An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610,...","description":"An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00626,"percentile":0.50493,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-08-28T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":[":2024-03-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2024-03-05"}]}],"versions":["Device specific"]}],"products":[{"vendor":"samsung","product":"exynos"},{"vendor":"samsung","product":"exynos_1080_firmware"},{"vendor":"samsung","product":"exynos_1280_firmware"},{"vendor":"samsung","product":"exynos_1330_firmware"},{"vendor":"samsung","product":"exynos_1380_firmware"},{"vendor":"samsung","product":"exynos_2100_firmware"},{"vendor":"samsung","product":"exynos_2200_firmware"},{"vendor":"samsung","product":"exynos_850_firmware"},{"vendor":"samsung","product":"exynos_9110_firmware"},{"vendor":"samsung","product":"exynos_9610_firmware"},{"vendor":"samsung","product":"exynos_980_firmware"},{"vendor":"samsung","product":"exynos_9810_firmware"},{"vendor":"samsung","product":"exynos_9820_firmware"},{"vendor":"samsung","product":"exynos_w920_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36481"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://github.com/advisories/GHSA-hqgq-fhhv-vxj3"},{"url":"https://source.android.com/security/bulletin/2024-03-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-36481","description":"An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop.","status":"published","published":"2023-08-28T00:00:00Z","modified":"2024-10-02T17:33:14.839Z","updated_at":"2026-11-02T14:35:27.810438Z"}],"euvd":[{"id":"EUVD-2023-40430","description":"An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop.","status":"published","published":"2023-08-28T00:00:00Z","modified":"2024-10-02T17:33:14Z","updated_at":"2026-11-03T00:27:57.212945Z"}],"ghsa":[{"id":"GHSA-hqgq-fhhv-vxj3","title":"An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610,...","description":"An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop.","status":"published","published":"2023-08-28T12:30:53Z","modified":"2024-04-04T07:14:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:56:49.265207Z"}],"nvd":[{"id":"CVE-2023-36481","description":"An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop.","status":"published","published":"2023-08-28T12:15:09.093Z","modified":"2026-06-17T06:06:21.943Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:25.025396Z"}],"osv":[{"id":"PUB-A-298187929","description":"In TBD of TBD, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2024-03-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:05:56.917158Z"}]}}