CyberSecBulletin
CVE-2023-50806NVD status: Analyzed

exynos_9820: Out-of-bounds Read

Published Updated By the CyberSecBulletin desk

CVE-2023-50806 is a high-severity out-of-bounds read vulnerability in exynos_9820 from Samsung, with a CVSS 3.1 base score of 8.4 out of 10. It can be exploited with local access to the system by an unauthenticated attacker, without any action from a user. Affected exynos_9820 versions: all versions. The record does not name a fixed version, so check the vendor advisory. There is no confirmed exploitation so far. EPSS estimates a 0.18% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Check which version of exynos_9820 you run against the affected versions below, and install the vendor's latest release.
  2. Read the advisory on semiconductor.samsung.com for workarounds and exact fixed builds.

Affected products and versions

VendorProductAffected versionsFixed in
Samsungexynos_9820all versionsNot stated
Samsungexynos_9825all versionsNot stated
Samsungexynos_980all versionsNot stated
Samsungexynos_990all versionsNot stated
Samsungexynos_850all versionsNot stated
Samsungexynos_1080all versionsNot stated
Samsungexynos_2100all versionsNot stated
Samsungexynos_2200all versionsNot stated
Samsungexynos_1280all versionsNot stated
Samsungexynos_1380all versionsNot stated
Samsungexynos_1330all versionsNot stated
Samsungexynos_9110all versionsNot stated
Samsungexynos_w920all versionsNot stated
Samsungexynos_w930all versionsNot stated
Samsungexynos_modem_5123all versionsNot stated
Samsungexynos_modem_5300all versionsNot stated
SamsungExynos Modem 5123 FirmwareNot specified in the recordNot stated
SamsungExynos Modem 5300 FirmwareNot specified in the recordNot stated
SamsungExynos 9820 FirmwareNot specified in the recordNot stated
SamsungExynos 9825 FirmwareNot specified in the recordNot stated
SamsungExynos 980 FirmwareNot specified in the recordNot stated
SamsungExynos 990 FirmwareNot specified in the recordNot stated
SamsungExynos 850 FirmwareNot specified in the recordNot stated
SamsungExynos 1080 FirmwareNot specified in the recordNot stated
SamsungExynos 2100 FirmwareNot specified in the recordNot stated

Version data comes from the organisation that assigned the CVE; 7 further products are omitted here. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
LocalThe attacker needs local access or must trick a user into running something.
Attack complexity
LowNo special conditions are needed; the attack works reliably.
Privileges required
NoneNo account or login is needed.
User interaction
NoneNo action by a victim is required.
Scope
UnchangedImpact stays within the vulnerable component.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Scored by CNA (mitre.org).

Official description

A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850 Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300 that allows out-of-bounds access to a heap buffer in the SIM Proactive Command.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

How developers prevent this class of flaw

  • Use a language that provides appropriate memory abstractions.

More Out-of-bounds Read vulnerabilities (CWE-125)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
  3. Record last changed materially (score, affected products, status or references).

References

Recent Out-of-bounds Read vulnerabilities

Spotted an error? Tell us.