Sign in

6.4 Medium

CVE-2022-23432 An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary…

Description

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Mobile Devices with Exynos chipsets	Versions not published

The 4 CVEs of Samsung Mobile Devices with Exynos chipsets →

CVE-2022-25819 OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack… 5.3 Medium CVE-2022-23431 An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution 6.4 Medium CVE-2022-23428 An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and… 8.4 High

Do you use Samsung Mobile Devices with Exynos chipsets?

Track this CVE Watch Samsung Mobile Devices with Exynos chipsets Check my SBOMs

www.cveye.io/en/cve/CVE-2022-23432

Timeline

Published February 11, 2022
Last modified August 3, 2024

References

security.samsungmobile.com security.samsungmobile.com

Track this CVE