CVE-2023-42533 — Samsung Android vulnerability

3 documents3 sources

Severity

6.8MEDIUMNVD

CNA6.6

EPSS

0.1%

top 65.92%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Android

Timeline

PublishedNov 7

Latest updateNov 13

Description

Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 0.9 | Impact: 5.9

Affected Packages1 packages

▶NVDsamsung/android12.0, 13.0+1

🔴Vulnerability Details

GHSA

GHSA-fvch-9qg2-pg4f: Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel↗2023-11-13

▶

CVEList

CVE-2023-42533: Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel↗2023-11-07

▶