GCVE - cpe:2.3:o:samsung:exynos_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:samsung:exynos_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Samsung (`0eb241f7-997b-5d1c-b2a3-00a89e1049d3`)
Product	Exynos Firmware (`78f580bd-c836-50e9-aa26-0a7de9840660`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-21455`	vulnerable	2026-06-08 05:54:18.951581	Details available MEDIUM (5.9) Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message. Published: 2023-03-16T00:00:00.000Z Updated: 2025-02-26T20:32:07.217Z Open on db.gcve.eu Reference links https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39902`	vulnerable	2026-06-08 05:47:18.937606	Details available MEDIUM (6.5) Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call. Published: 2022-12-08T00:00:00.000Z Updated: 2025-04-22T19:50:23.884Z Open on db.gcve.eu Reference links https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=12	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39901`	vulnerable	2026-06-08 05:47:18.937056	Details available MEDIUM (6.5) Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB. Published: 2022-12-08T00:00:00.000Z Updated: 2025-04-23T15:33:01.441Z Open on db.gcve.eu Reference links https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=12	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39881`	vulnerable	2026-06-08 05:47:18.904859	Details available MEDIUM (5.3) Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory. Published: 2022-11-09T00:00:00.000Z Updated: 2025-05-01T19:34:22.405Z Open on db.gcve.eu Reference links https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.