Attributed metadata history

Up to 100 retained publisher events per page for be25b379806145daea2d71221854f6ba27af47e61db6a63c785a751b7a6c125f. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_350d40f2cc69277bca

observed · 2026-10-12 08:34:03 UTC

We have identified a new heap buffer overflow vulnerability in Samsung’s Android Radio Interface Layer implementation. The vulnerability can be exploited by a malicious (compromised) baseband runtime to achieve arbitrary code execution in Android in the radio context. The vulnerability we are disclosing in this advisory affected a wide range of Samsung devices, including phones on the newest Exynos chipsets. The July 2023 issue of the Samsung Mobile Security Bulletin contains this vulnerability as CVE-2023-30649. Vulnerability Details The Exynos vendor RIL implementation, provided by the libsec-ril.so library, exposes an Inter Process Call (IPC) interface to the baseband processor. The baseband processor can use this API through dedicated IPC messages.

Fingerprint: 3637ea0b977d2b2d9ba20fc57a2d0fc9abf43f97f5aa877601ef4b96bfb6540e

intelligence_src_350d40f2cc69277bca

observed · 2026-10-12 08:34:02 UTC

available

Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578