CVE-2023-29087

Vulnerability

The vulnerability is a memory corruption issue in the baseband firmware of Samsung Exynos processors. It occurs due to insufficient parameter validation when decoding an SIP Retry-After header. Affected products include Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123 [1].

Exploitation

An attacker can exploit this vulnerability by sending a specially crafted SIP message containing a malicious Retry-After header to the target device. No authentication is required, as the baseband processes incoming SIP messages. The vulnerability can be triggered remotely over the network.

Impact

Successful exploitation leads to memory corruption, which could allow an attacker to execute arbitrary code on the baseband processor. This could result in full compromise of the device's communication capabilities, including potential for remote code execution with baseband privileges.

Mitigation

Samsung has not publicly disclosed a specific patch or workaround for this vulnerability in the available references [1]. Users are advised to monitor Samsung's product security updates for future fixes. If a patch becomes available, it should be applied promptly.