Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-39902 EUVD-2022-42347GHSA-w552-xcp4-6hjg

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IME…

Published Dec 8, 2022 · Updated Apr 22, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Exynos baseband – < SMR Dec-2022 Release 1 SMR Dec-2022 Release 1

References