CVE-2023-29092 Other in n/a
Improper parameter handling in Exynos modem firmware allows incorrect resource binding during network interface operations, potentially affecting connectivity stability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2023-29092?
CVE-2023-29092 is a low-severity vulnerability in Samsung Exynos 1080 Firmware, published on 9 May 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface.
Which versions are affected by CVE-2023-29092?
It affects 4 products.
Products include Samsung Exynos 1080 Firmware, Samsung Exynos 5123 Firmware, Samsung Exynos 5300 Firmware, Samsung Exynos 980 Firmware.
How do I fix CVE-2023-29092?
Apply the vendor's patch.
Is CVE-2023-29092 being exploited?
There is no known exploitation of CVE-2023-29092 in the wild and no public exploit code.
Other vulnerabilities in Samsung Exynos 1080 Firmware
Sources
Also known as A-269657712, GHSA-wq2r-8c3h-3jr4, PUB-A-269657712.