PT-2023-29735 · Samsung · Exynos

Published 2023-12-12 · Updated 2023-12-15 · CVE-2023-45864

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 980 through 9820 Samsung Mobile Processor Exynos versions 1080 through 1380 Samsung Mobile Processor Exynos versions 2100 through 2200

Description A race condition issue discovered in Samsung Mobile Processor Exynos allows unintended modifications of values within certain areas.

Recommendations For Samsung Mobile Processor Exynos versions 980 through 9820, update to a version that includes a fix for the race condition issue. For Samsung Mobile Processor Exynos versions 1080 through 1380, update to a version that includes a fix for the race condition issue. For Samsung Mobile Processor Exynos versions 2100 through 2200, update to a version that includes a fix for the race condition issue. As a temporary workaround, consider implementing synchronization mechanisms to prevent unintended modifications of values within certain areas.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2023-45864

Affected Products

Exynos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-45864 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://twitter.com/CVEnew/status/1734756716707749943 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1734825276402454617 · Twitter Post
• https://t.me/cvenotify/63803 · Telegram Post