CVE-2023-24033

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 32.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-03-13 · updated 2026-06-17
Weakness: CWE-20

Description

The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.

Affected products

Samsung Exynos 1080 firmware: all versions
Samsung Exynos 980 Firmware: all versions
Samsung Exynos Auto T5123 Firmware: all versions
Samsung Exynos Modem 5123 Firmware: all versions
Samsung Exynos Modem 5300 Firmware: all versions

References

http://packetstormsecurity.com/files/172137/Shannon-Baseband-accept-type-SDP-Attribute-Memory-Corruption.html
https://semiconductor.samsung.com/processor/modem/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
http://packetstormsecurity.com/files/172137/Shannon-Baseband-accept-type-SDP-Attribute-Memory-Corruption.html
https://semiconductor.samsung.com/processor/modem/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Get alerted when CVE-2023-24033 or the next vulnerability affects your stack