CVE-2023-21494: 
NixOS vulnerability analysis and mitigation

Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access (Samsung Mobile).

The vulnerability is classified as a buffer overflow vulnerability in the authentication API within mm_Authentication.c component of Shannon baseband. The issue has been assigned a CVSS v3.1 base score of 9.8 (CRITICAL) by NIST with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, while Samsung Mobile assigned it a score of 5.6 (MEDIUM) with vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. The vulnerability is categorized under CWE-120 (Buffer Copy without Checking Size of Input) and CWE-20 (Improper Input Validation) (NVD).

If exploited, this vulnerability could allow remote attackers to cause invalid memory access, potentially leading to system crashes or arbitrary code execution with elevated privileges (Samsung Mobile).

The vulnerability was addressed in the Samsung Mobile Security Maintenance Release (SMR) May-2023 Release 1. Users should update their devices to this version or later to mitigate the risk (Samsung Mobile).