CVE-2022-23431 — Classic Buffer Overflow in Mobile Devices With Exynos Chipsets

CWE-120 — Classic Buffer Overflow2 documents2 sources
Severity
6.7MEDIUMNVD
EPSS
0.0%
top 95.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Samsung Mobile Devices With Exynos ChipsetsGoogle Android
Timeline
PublishedFeb 11
Latest updateFeb 12

Description

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5samsung_mobile/samsung_mobile_devices_with_exynos_chipsetsP(9.0), Q(10.0), R(11.0), S(12.0) devices with selected Exynos chipsets — SMR Feb-2022 Release 1
▶NVDgoogle/android10.0, 11.0, 12.0+2

🔴Vulnerability Details

1
GHSA
GHSA-2pxg-gfxf-6253: An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution↗2022-02-12
▶
CVE-2022-23431 — Classic Buffer Overflow | cvebase