CVE-2023-21517: Samsung Baseband LTE ESM TFT Heap Buffer Overflow

We have identified a new heap buffer overflow vulnerability in Samsung’s baseband implementation (mainly used in Exynos chipsets). The vulnerability can be exploited to achieve arbitrary code execution in the baseband runtime.
The vulnerability we are disclosing in this advisory affected a wide range of Samsung devices, including phones on the newest Exynos chipsets. The June 2023 issue of the Samsung Mobile Security Bulletin contains this vulnerability as CVE-2023-21517.
Vulnerability Details Layer 3 LTE NAS messages are composed of various …

advisory arbitrary code baseband buffer buffer overflow buffer overflow vulnerability code code execution cve devices exploited exynos exynos chipsets heap buffer overflow implementation lte overflow phones runtime samsung tft vulnerability