Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call.

Description

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile Samsung Mobile Devices

  • Exynos baseband to < SMR Dec-2022 Release 1affected

References