CVE-2023-30648: Samsung RIL Stack Buffer Overflow

We have identified a new stack buffer overflow vulnerability in Samsung’s Android Radio Interface Layer implementation. The vulnerability can be exploited by a malicious (compromised) baseband runtime to achieve denial of service in Android in the radio context.
The vulnerability we are disclosing in this advisory affected a wide range of Samsung devices, including phones on the newest Exynos chipsets. The July 2023 issue of the Samsung Mobile Security Bulletin contains this vulnerability as CVE-2023-30648.
Vulnerability Details The Exynos vendor …

advisory android baseband buffer buffer overflow buffer overflow vulnerability compromised context cve denial of service devices exploited implementation interface malicious overflow radio runtime samsung service stack vulnerability