PT-2023-27334 · Samsung · Samsung Mobile Processor Exynos

Published 2023-09-12 · Updated 2023-09-14 · CVE-2023-40218

Positive Technologies (AI Summary)

CVSS v3.1

2.0

Low

Base vector

AC:L/AV:L/A:L/C:N/I:N/PR:H/S:U/UI:R

Name of the Vulnerable Software and Affected Versions Samsung Exynos Mobile Processor versions 1280, 1380, 2100, 2200, 980, 9820

Description An issue was discovered in the NPU kernel driver, allowing an integer overflow to bypass detection of error cases via a crafted application.

Recommendations For Samsung Exynos Mobile Processor versions 1280, 1380, 2100, 2200, 980, 9820, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2023-40218

Affected Products

Samsung Mobile Processor Exynos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-40218 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://t.me/cibsecurity/70290 · Telegram Post
• https://twitter.com/CVEnew/status/1701609896935059800 · Twitter Post