Samsung Exynos Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Samsung Exynos Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-39901 — CVSS 6.5 (medium): Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption…
• CVE-2022-39902 — CVSS 6.5 (medium): Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including…
• CVE-2023-21455 — CVSS 5.9 (medium): Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message.
• CVE-2022-39881 — CVSS 5.3 (medium): Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to…