CVE-2023-49928: exynos 850 — Fix

Description

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check states specified by the RRC. This can lead to disclosure of sensitive information.

Is your site exposed to CVE-2023-49928?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
samsung	exynos_9820_firmware	All
samsung	exynos_9820	All
samsung	exynos_9825_firmware	All
samsung	exynos_9825	All
samsung	exynos_980_firmware	All
samsung	exynos_980	All
samsung	exynos_990_firmware	All
samsung	exynos_990	All
samsung	exynos_850_firmware	All
samsung	exynos_850	All
samsung	exynos_1080_firmware	All
samsung	exynos_1080	All
samsung	exynos_2100_firmware	All
samsung	exynos_2100	All
samsung	exynos_2200_firmware	All
samsung	exynos_2200	All
samsung	exynos_1280_firmware	All
samsung	exynos_1280	All
samsung	exynos_1380_firmware	All
samsung	exynos_1380	All
samsung	exynos_1330_firmware	All
samsung	exynos_1330	All
samsung	exynos_modem_5123_firmware	All
samsung	exynos_modem_5123	All
samsung	exynos_modem_5300_firmware	All
samsung	exynos_modem_5300	All

References

Advisories & Patches

https://semiconductor.samsung.com/support/quality-support/product-security-updates/ https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Frequently Asked Questions

What is CVE-2023-49928? +

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check states specified by the RRC. This can lead to disclosure of sensitive information. It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2023-49928? +

CVE-2023-49928 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2023-49928? +

CVE-2023-49928 affects products from samsung, specifically: exynos_1080, exynos_1080_firmware, exynos_1280, exynos_1280_firmware, exynos_1330, exynos_1330_firmware, exynos_1380, exynos_1380_firmware, exynos_2100, exynos_2100_firmware, exynos_2200, exynos_2200_firmware, exynos_850, exynos_850_firmware, exynos_980, exynos_980_firmware, exynos_9820, exynos_9820_firmware, exynos_9825, exynos_9825_firmware, exynos_990, exynos_990_firmware, exynos_modem_5123, exynos_modem_5123_firmware, exynos_modem_5300, exynos_modem_5300_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2023-49928? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-53075 9.8

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2.

CVE-2025-0634 9.8

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.

CVE-2025-53076 9.8

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.

CVE-2025-54442 9.8

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO …

CVE-2025-54443 9.8

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload …

CVE-2025-54440 9.8