CVE-2023-31114

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-07 · updated 2026-06-17
Weakness: CWE-669

Description

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended querying of the SIM status via a crafted application.

Affected products

Samsung Exynos 5123 Firmware: all versions
Samsung Exynos 5300 Firmware: all versions

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Get alerted when CVE-2023-31114 or the next vulnerability affects your stack