← Database

CVE-2022-23425

HIGH CVSS: 8.6 Published: 2022-02-11 Modified: 2026-06-17

Description

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.

Affected Platforms

Google AndroidSamsung Exynos

Weakness Type

CWE-20, CWE-20

References