CVE-2020-10835

An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software

published March 24, 2020

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

⚠️ Here’s a sneaky buffer overflow lurking in Samsung mobile devices with Exynos modem chipsets, affecting any software before February 2020! 📱 Think of this vulnerability like a well-packaged gift box that suddenly bursts open during delivery. If the contents spill everywhere, it can create a mess that the delivery team wasn’t prepared to handle. An attacker could potentially exploit this overflow to disrupt communication or even gain unauthorized access, resulting in compromised device functionality. While no incidents have been reported yet, the risk could escalate if people keep using outdated software.

Put simply

Think of this vulnerability like a well-packaged gift box that suddenly bursts open during delivery. If the contents spill everywhere, it can create a mess that the delivery team wasn’t prepared to handle. This vulnerability arises from a buffer overflow in baseband CP message decoding on certain Samsung mobile devices, allowing attackers to manipulate the message handling process and cause unpredictable behavior.

What to do

An attacker could potentially exploit this overflow to disrupt communication or even gain unauthorized access, resulting in compromised device functionality. While no incidents have been reported yet, the risk could escalate if people keep using outdated software. To protect your device, update the software to the latest version available that was released after February 2020. Regularly check for updates to ensure you have the necessary patches applied. 🔄 You’ve got this! Keeping your devices updated is the best way to fend off potential threats. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01456 · 73.3th percentile
Published
2020-03-24T17:17Z
EPSS history
Timeline
  • 24 MAR 17:17Z
    An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software
    cvelistv5