CVE-2023-29085

Vulnerability

Insufficient parameter validation in the SIP status line decoding routine of Samsung Exynos baseband firmware leads to memory corruption. Affected products include Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123 [1]. The vulnerability resides in the baseband processor's handling of SIP signaling messages.

Exploitation

An attacker can exploit this vulnerability by sending a specially crafted SIP status line to the target device's baseband over the cellular network. No authentication is required, and the attack can be performed remotely without user interaction. The insufficient validation allows the attacker to corrupt memory in the baseband firmware.

Impact

Successful exploitation results in memory corruption, which could lead to denial of service or potentially arbitrary code execution within the baseband processor. This could allow the attacker to compromise the device's cellular communication capabilities or gain elevated privileges.

Mitigation

Samsung has not publicly disclosed a specific patch or fixed version for this vulnerability in the available references. Users should apply any firmware updates provided by Samsung for their devices. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog as of the publication date.