CVE-2023-37366
Received Received - Intake

Buffer Overflow in Shannon SM Task of Samsung Exynos Processors

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: MITRE

Description
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, an Exynos Auto T5123. In the Shannon SM Task, improper handling of a loop with an unreachable exit condition cannot guarantee the termination of a required service via a malformed SM message.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2023-37366
EUVD
EUVD-2023-60665

Affected Vendors & Products

Showing 16 associated CPEs
Vendor Product Version / Range
samsung exynos_9810 *
samsung exynos_9610 *
samsung exynos_9820 *
samsung exynos_980 *
samsung exynos_850 *
samsung exynos_1080 *
samsung exynos_2100 *
samsung exynos_2200 *
samsung exynos_1280 *
samsung exynos_1380 *
samsung exynos_1330 *
samsung exynos_9110 *
samsung exynos_w920 *
samsung exynos_modem_5123 *
samsung exynos_modem_5300 *
samsung exynos_auto_t5123 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-835 The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Samsung Exynos processors and modems. It involves improper handling of a loop with an unreachable exit condition in the Shannon SM Task. This flaw may prevent a required service from terminating properly when processing a malformed SM message.

Detection Guidance

Detection requires checking if your device uses an affected Samsung Exynos processor model. Contact your device manufacturer or vendor for firmware version details. No direct commands are provided in the resources.

Impact Analysis

The vulnerability could lead to service disruption or instability in affected Samsung Exynos devices. Since it involves improper loop handling, it may cause unexpected behavior or crashes in the Shannon SM Task component.

Mitigation Strategies

Apply security updates from Samsung or your device vendor. If patches are unavailable, consider isolating affected devices from critical systems until updates are applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-37366. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart