CVE-2024-28818

Vulnerability

The baseband software in Samsung Exynos processors (980, 990, 1080, 2100, 2200, 1280, 1380, 1330, 2400) and Exynos Modems (5123, 5300) fails to properly verify states specified by the Radio Resource Control (RRC) module. This vulnerability arises from missing or incorrect state validation in the baseband firmware, affecting devices using the listed chips.

Exploitation

An attacker, such as a malicious network entity (e.g., a fake base station), can send crafted RRC messages over the air to trigger the state validation flaw. No prior authentication or physical proximity is required. The attack involves sending malformed or out-of-sequence RRC state transitions that the baseband software does not correctly check.

Impact

Successful exploitation could lead to disclosure of sensitive information processed by the baseband, including network configuration details, user data, or cryptographic material. The exact scope is not detailed, but it may compromise user privacy and network security.

Mitigation

As of the publication date (June 5, 2024), no specific fix has been announced. Users should monitor Samsung's product security updates for future patches. No workaround is currently available.