CVE-2022-23428 — Classic Buffer Overflow in Mobile Devices With Exynos Chipsets

CWE-120 — Classic Buffer OverflowCWE-787 — Out-of-bounds Write2 documents2 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 97.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Samsung Mobile Devices With Exynos ChipsetsGoogle Android
Timeline
PublishedFeb 11
Latest updateFeb 12

Description

An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5samsung_mobile/samsung_mobile_devices_with_exynos_chipsetsQ(10.0), R(11.0), S(12.0) devices with selected Exynos chipsets — SMR Feb-2022 Release 1
▶NVDgoogle/android10.0, 11.0, 12.0+2

🔴Vulnerability Details

1
GHSA
GHSA-49hc-g879-6v43: An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution↗2022-02-12
▶
CVE-2022-23428 — Classic Buffer Overflow | cvebase