2023年6月7日星期三

Samsung Products Multiple Vulnerabilities

Release Date: 7 Jun 2023

RISK: Medium Risk

TYPE: Operating Systems - Mobile & Apps

TYPE: Mobile & Apps

Multiple vulnerabilities were identified in Samsung Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, data manipulation and sensitive information disclosure on the targeted system.

Note:

CVE-2023-0266 is being exploited in the wild. The vulnerability is related to Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the local user.

Impact

Denial of Service
Elevation of Privilege
Information Disclosure
Remote Code Execution
Data Manipulation

System / Technologies affected

Android 11, 12, 13
Select devices using Exynos CP chipsets

For affected products, please refer to the link below:

https://security.samsungmobile.com/securityUpdate.smsb

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
https://security.samsungmobile.com/securityUpdate.smsb

Vulnerability Identifier

Source

https://security.samsungmobile.com/securityUpdate.smsb

Related Link

https://security.samsungmobile.com/securityUpdate.smsb

沒有留言:

發佈留言

訂閱：發佈留言 (Atom)