VDB
CISA-2023-42537
CISA-2023-42537
PUBLISHED
CVSS 8.4 HIGH
Reported by Samsung Mobile · Published November 7, 2023
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
Risk Scores
CVSS 3.1
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | SMR Nov-2023 Release in Android 11, 12, 13 |
| Samsung Mobile | Samsung Mobile Devices | SMR Nov-2023 Release in Android 11, 12, 13, * |
Timeline
- Nov 7, 2023 CVE Published
- Sep 17, 2024 CVE Updated