PSA: Samsung Exynos Baseband Compromised (Samsung + Pixel Phones), 18 Vulnerabilities w/ 4 Critical

Look Up on 17/03/2023 - 22:25
Last edited 18/03/2023 - 10:39 by 1 other user

Google: Turn off VoLTE, Wi-Fi calling due to severe Exynos modem vulnerabilities on Pixel 6, more

Disable VoLTE and Wi-Fi Calling until March 2023 security patch is installed.

Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim’s phone number. With limited additional research and development, we believe that skilled attackers would be able to quickly create an operational exploit to compromise affected devices silently and remotely.

According to Samsung Semiconductor (January 2023), these are the affected chipsets: Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5123. Google compiled a list of likely affected products:

Samsung Galaxy phones including those in the S22, M33, M13, M12, A71, A53, A33, A21, A13, A12, and A04 series
Vivo phones including those in the S16, S15, S6, X70, X60, and X30 series
Google Pixel 6 and 6 Pro, Pixel 6a, Pixel 7 and 7 Pro
Any wearables that use the Exynos W920 chipset
Any vehicles that use the Exynos Auto T5123 chipset

• 

  dcep on 17/03/2023 - 23:45

  Didn't know Pixels using Exynos these days.

  • 

    deme on 18/03/2023 - 09:54

    +1

    What are you talking about? It was Qualcomm before the Pixel 6.

  • 

    7ekn00 on 18/03/2023 - 11:33

    -3

    It's talking about the 4G/5G chip in use, not CPU/GPU - pixels now use Tensor CPU/GPUs (googles own chip)

    All the phones listed in the OP use those modem chips!

    • 

      deme on 18/03/2023 - 11:43

      +1

      You know they used Qualcomm SoCs with an integrated modem before the Pixel 6 right?
      right?

• 

  Stopback on 17/03/2023 - 23:50

  What's the number you dial to disable volt

  • 

    Muzeeb on 17/03/2023 - 23:59

    Settings>connections>mobile networks>volte toggle?

    Or just use 3G?

• 

  flagger on 18/03/2023 - 10:19

  Australian S22 series use qualcomm, so they are not affected.

• 

  7ekn00 on 18/03/2023 - 11:32

  -3

  It's talking about the onboard modem chip for 4G/5G, not CPU/GPU processor …

  Australian S22 still use Exynos MODEM chips for 4G/5G (just qualcomm for CPU/GPU) … as do all the listed models above!

  • 

    deme on 18/03/2023 - 11:39

    +1

    Stop making stuff up! The Au and US models use a Qualcomm SoC, it's all on the same die.

• 

  Guybrush57 on 18/03/2023 - 11:55

  Woohoo my Note20 Ultra 5G isn't affected.

• 

  silenthillrocks on 18/03/2023 - 12:13

  That's why I use a dumb phone

  • 

    Click_It on 19/03/2023 - 18:01

    +1

    Land line huh? That won't get hacked.