NetSight
IP …
high8.6

CVE-2022-23425

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.

Impact

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0, 12.0

Weakness classification

CWE-20

References