Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-39881 EUVD-2022-42326GHSA-3q99-27hh-rcx8

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to r…

Published Nov 9, 2022 · Updated May 1, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Select devices using Exynos CP chipsets – < SMR Nov-2022 Release 1 SMR Nov-2022 Release 1

References