CVE-2023-26496 | Vulnetix

CVE-2023-26496 PUBLISHED CVSS 8.6 HIGH

Reported by mitre · Published March 23, 2023

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in the SDP (Session Description Protocol) module.

Risk scores

CVSS 3.1

8.6

CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*

Timeline

Mar 16, 2023 PoC Published
Mar 20, 2023 CVE Published
Mar 23, 2023 EPSS Score (30 in total, the first dated here)
Apr 28, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2023-26496
vulnetix vdb fixes CVE-2023-26496

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-26496/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →