What is CVE-2023-28613?

CVE-2023-28613 is a medium-severity vulnerability in Samsung Exynos 1280, classified under Integer Overflow or Wraparound. CVSS score: 6.8/10. Published 2023-04-04.

How severe is CVE-2023-28613?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Integer overflow in Samsung Exynos 1280

CVE-2023-28613

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.

Vulnerability class: Integer Overflow

EPSS: 0.012 (64.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

cve@mitre.org (Product)
cve@mitre.org (Product)
cve@mitre.org (Vendor Advisory)
cve@mitre.org

Frequently asked questions

What is CVE-2023-28613?: CVE-2023-28613 is a medium-severity vulnerability in Samsung Exynos 1280, classified under Integer Overflow or Wraparound. CVSS score: 6.8/10. Published 2023-04-04.
How severe is CVE-2023-28613?: Medium severity. CVSS v3 base score is 6.8 out of 10.