← Database

CVE-2022-39902

MEDIUM CVSS: 6.5 Published: 2022-12-08 Modified: 2026-06-17

Description

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call.

Affected Platforms

Samsung Exynos FirmwareSamsung Exynos

Weakness Type

CWE-285, NVD-CWE-Other

References