CVE-2023-30646: Samsung RIL Heap Buffer Overflow

We have identified a new heap buffer overflow vulnerability in Samsung’s Android Radio Interface Layer implementation. The vulnerability can be exploited by a malicious (compromised) baseband runtime to achieve arbitrary code execution in Android in the radio context.
The vulnerability we are disclosing in this advisory affected a wide range of Samsung devices, including phones on the newest Exynos chipsets. The July 2023 issue of the Samsung Mobile Security Bulletin contains this vulnerability as CVE-2023-30646.
Vulnerability Details The Exynos vendor …

advisory android arbitrary code baseband buffer buffer overflow buffer overflow vulnerability code code execution compromised context cve devices exploited heap buffer overflow implementation interface malicious overflow radio runtime samsung vulnerability