Skip to main content
Live Webinar with SANS (June 25)— Agentic CTI Automation for Fun & ProfitRegister Free
Mallory
Critical

Denial of Service in Samsung Exynos modem SDP format type handling

IdentifiersCVE-2023-24033CWE-20· Improper Input Validation

CVE-2023-24033 affects Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets. According to the provided content, the vulnerability exists because the modem firmware does not properly validate or check format types specified by the Session Description Protocol (SDP) module. Improper handling of attacker-controlled or malformed SDP format type data can cause the baseband to enter a denial-of-service condition. The supplied description specifically supports a parsing/validation flaw in SDP processing leading to modem instability or failure; although mention contexts reference broader Exynos modem remote code execution research, the provided vulnerability-specific description only substantiates denial of service for this CVE.

Share:
For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation can cause a denial of service in the affected baseband modem. In practical terms, this may crash, hang, or otherwise disrupt modem functionality, potentially resulting in loss of cellular service or degraded communications capability on the affected device until the modem or device recovers.

Mitigation

If you can’t patch tonight, do this now.

Where patches are not yet available, reduce exposure of the baseband to untrusted or malformed SDP-bearing traffic where operationally possible. Because this is a baseband parsing issue, practical mitigations are limited; prioritizing vendor updates, restricting use of affected devices in high-risk environments, and monitoring for abnormal modem crashes or cellular service loss are the most supportable interim measures based on the available information.

Remediation

Patch, then assume compromise.

Apply Samsung-provided firmware or security updates for affected devices and products containing Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, or Exynos Auto T512 chipsets. The provided content does not include exact fixed version numbers, so remediation should be based on vendor-issued patches and device-specific security updates from Samsung or downstream OEMs/carriers.
PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

EXPOSURE SURFACE

Affected products & vendors

Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.

VendorProductType
Samsung ElectronicsExynos 1080 Firmwareoperating_system
Samsung ElectronicsExynos 980 Firmwareoperating_system
Samsung ElectronicsExynos Auto T5123 Firmwareoperating_system
Samsung ElectronicsExynos Modem 5123 Firmwareoperating_system
Samsung ElectronicsExynos Modem 5300 Firmwareoperating_system

Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.
Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity

Community discussion across Reddit, Mastodon, and other social sources.