Security readout for executives and security teams
Plain-English summary
This CVE describes a buffer overflow in Samsung Exynos modem baseband firmware on some Samsung mobile devices with software through November 3, 2017. The public record does not identify exact models, CVSS severity, or observed exploitation. Risk is mainly for organizations still allowing older, unpatched Samsung devices.
Executive priority
Prioritize this only if the organization still permits old Samsung mobile devices. The issue is potentially serious because it affects modem/baseband code, but public severity and exploitation evidence are incomplete.
Technical view
CVE-2018-21090 maps to Samsung SVE-2017-10745, listed for January 2018. The issue is a baseband buffer overflow affecting S.LSI/Exynos modem chipsets in Samsung mobile software through 2017-11-03. Public data provided here lacks CPEs, specific vulnerable builds, CWE, CVSS, exploit prerequisites, and patch build identifiers.
Likely exposure
Exposure is likely limited to older Samsung mobile devices using S.LSI/Exynos modem chipsets with software through 2017-11-03. The source bundle does not name exact device models, carriers, regions, or firmware versions.
Exploitation context
CISA KEV status is false, and the provided sources do not cite active exploitation, public exploit code, or exploitation prerequisites. Treat exploit status as unconfirmed rather than absent.
Researcher notes
Key gaps are exact affected models, vulnerable firmware identifiers, CVSS, CWE, and patch mapping. Use Samsung SVE-2017-10745 as the anchor when researching vendor bulletins or device-specific firmware history.
Mitigation direction
- Inventory Samsung devices and identify Exynos/S.LSI modem models.
- Check Samsung guidance for SVE-2017-10745 January 2018 update status.
- Update affected devices to vendor-supported security patch levels.
- Retire or restrict unsupported devices that cannot receive updates.
- Use MDM policy to block outdated Samsung security patch levels.
Validation and detection
- Compare device software dates against the 2017-11-03 affected threshold.
- Confirm installed Samsung security patch level includes January 2018 or later fixes.
- Verify whether each device uses an Exynos/S.LSI modem chipset.
- Review MDM inventory for unmanaged or unsupported Samsung devices.
- Document exceptions where vendor patch status cannot be confirmed.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-21090 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://security.samsungmobile.com/securityUpdate.smsbCVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.