PT-2023-27409 · Samsung · Exynos Mobile Processor

Published 2023-09-07 · Updated 2023-09-12 · CVE-2023-40353

Positive Technologies (AI Summary)

CVSS v3.1

2.0

Low

Base vector

AC:L/AV:L/A:L/C:N/I:N/PR:H/S:U/UI:R

Name of the Vulnerable Software and Affected Versions Exynos Mobile Processor versions 980 and 2100

Description An issue was discovered in Exynos Mobile Processor, where an integer overflow at a buffer index can prevent the execution of requested services via a crafted application.

Recommendations For Exynos Mobile Processor versions 980 and 2100, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2023-40353

Affected Products

Exynos Mobile Processor

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-40353 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1700022741657657521 · Twitter Post
• https://t.me/cvenotify/57801 · Telegram Post
• https://t.me/cibsecurity/70122 · Telegram Post
• https://twitter.com/CVEnew/status/1699971221100564521 · Twitter Post
• https://t.me/cvenotify/58019 · Telegram Post