CVE-2023-26497

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-03-21 · updated 2026-06-17
Weakness: CWE-787

Description

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute.

Affected products

Samsung Exynos 1080 firmware: all versions
Samsung Exynos 980 Firmware: all versions
Samsung Exynos Auto T5123 Firmware: all versions
Samsung Exynos Modem 5123 Firmware: all versions
Samsung Exynos Modem 5300 Firmware: all versions

References

https://semiconductor.samsung.com/processor/mobile-processor/
https://semiconductor.samsung.com/processor/modem/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
https://semiconductor.samsung.com/processor/mobile-processor/
https://semiconductor.samsung.com/processor/modem/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Get alerted when CVE-2023-26497 or the next vulnerability affects your stack