CVE-2023-29090

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-14 · updated 2026-06-17
Weakness: CWE-787

Description

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Via header.

Affected products

Samsung Exynos 1080 firmware: all versions
Samsung Exynos 5123 Firmware: all versions
Samsung Exynos 5300 Firmware: all versions
Samsung Exynos 9110 Firmware: all versions
Samsung Exynos 980 Firmware: all versions
Samsung Exynos Auto T5123 Firmware: all versions

References

http://packetstormsecurity.com/files/172287/Shannon-Baseband-Via-Header-Decoder-Stack-Buffer-Overflow.html
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
http://packetstormsecurity.com/files/172287/Shannon-Baseband-Via-Header-Decoder-Stack-Buffer-Overflow.html
https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Get alerted when CVE-2023-29090 or the next vulnerability affects your stack