Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-37366

Quick assessment

Affected
Samsung Exynos 850 firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Google Pixel是美国谷歌（Google）公司的一款智能手机。 Google Pixel存在安全漏洞，该漏洞源于容易受到拒绝服务攻击。

CVSS 2.8 · Low

Possible ATT&CK Techniques 1 AI

T1083 · File and Directory Discovery
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-37366

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, an Exynos Auto T5123. In the Shannon SM Task, improper handling of a loop with an unreachable exit condition cannot guarantee the termination of a required service via a malformed SM message.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
不可达退出条件的循环(无限循环)
Source: CVE Program / CVE List V5
Vulnerability Title
Google Pixel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Pixel是美国谷歌（Google）公司的一款智能手机。 Google Pixel存在安全漏洞，该漏洞源于容易受到拒绝服务攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Samsung Exynos 850 firmware 0 ~ 2023-04-28 -

II. Public POCs for CVE-2023-37366

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-37366

请登录查看更多情报信息。

Vendor Advisories for CVE-2023-37366 (1)

Same Patch Batch · Samsung · 2026-09-14 · 19 CVEs total

CVE-2026-23789 7.8 HIGH 三星Exynos MFC编码器double-free漏洞
CVE-2026-33963 7.5 HIGH 三星Exynos芯片组摄像头栈缓冲区溢出致拒绝服务
CVE-2026-33964 6.4 MEDIUM 三星Exynos 1580/2500相机模块指针解引用漏洞
CVE-2026-23787 4.2 MEDIUM 三星Exynos多款芯片DRM驱动UAF致内核崩溃
CVE-2026-23788 4.2 MEDIUM Exynos DPU堆溢出致系统崩溃
CVE-2026-23791 4.2 MEDIUM 三星Exynos DPU驱动越界写致内核损坏
CVE-2026-23790 4.2 MEDIUM 三星Exynos DPU双释放导致内核内存损坏
CVE-2026-33957 4.2 MEDIUM 三星 Exynos 1580 驱动越界读写漏洞
CVE-2026-23792 4.0 MEDIUM 三星Exynos基带RRC未认证消息处理缺陷
CVE-2026-23793 3.5 LOW 三星Exynos系列芯片摄像头驱动越界访问致内核内存损坏
CVE-2026-33970 3.5 LOW 三星Exynos 5G基带RRC空指针解引用
CVE-2026-33962 2.8 LOW Exynos多型号Wi-Fi Netlink命令越界读
CVE-2026-33960 2.8 LOW Exynos系列Wi-Fi驱动越界写致拒绝服务
CVE-2026-23786 2.8 LOW Exynos处理器DRM驱动TOCTOU竞态致内核崩溃
CVE-2026-33967 2.8 LOW Exynos系列处理器相机驱动越界访问致内存损坏
CVE-2026-33968 2.8 LOW 三星Exynos系列处理器Camera驱动TOCTOU越界
CVE-2026-33956 2.8 LOW 三星Exynos芯片相机模块越界写导致服务中断
CVE-2026-33966 2.8 LOW 三星Exynos 1330等芯片Camera驱动信息泄露

IV. Related Vulnerabilities

Same product: Exynos 850 firmware
Same vendor: Samsung
Same weakness: CWE-835

V. Comments for CVE-2023-37366

No comments yet

Leave a comment