PT-2023-29735 · Samsung · Exynos

Publicado 2023-12-12 · Atualizado 2023-12-15 · CVE-2023-45864

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Média

Vetor base

AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 980 through 9820 Samsung Mobile Processor Exynos versions 1080 through 1380 Samsung Mobile Processor Exynos versions 2100 through 2200

Description A race condition issue discovered in Samsung Mobile Processor Exynos allows unintended modifications of values within certain areas.

Recommendations For Samsung Mobile Processor Exynos versions 980 through 9820, update to a version that includes a fix for the race condition issue. For Samsung Mobile Processor Exynos versions 1080 through 1380, update to a version that includes a fix for the race condition issue. For Samsung Mobile Processor Exynos versions 2100 through 2200, update to a version that includes a fix for the race condition issue. As a temporary workaround, consider implementing synchronization mechanisms to prevent unintended modifications of values within certain areas.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2023-45864

Produtos afetados

Exynos

Referências · 5

• https://twitter.com/CVEnew/status/1734756716707749943 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-45864 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1734825276402454617 · Publicação no Twitter
• https://t.me/cvenotify/63803 · Publicação no Telegram
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Aviso do Fabricante