Out-of-Bounds Write Vulnerability in Samsung Galaxy Book Products
CVE-2023-30695

6.7MEDIUM

Key Information:

Vendor

Samsung
Status
Galaxy Book Go, Galaxy Book Go 5g, Galaxy Book2 Go And Galaxy Book2 Pro 360
Vendor
CVE Published:
10 August 2023

What is CVE-2023-30695?

An out-of-bounds write vulnerability has been identified in the Samsung Galaxy Book Series, specifically within the SSHDCPAPP TA component. This flaw affects various models including the Galaxy Book Go, Galaxy Book Go 5G, Galaxy Book2 Go, and Galaxy Book2 Pro 360, prior to a system hardware update released on July 13, 2023. A local attacker may exploit this vulnerability to execute arbitrary code, potentially compromising system integrity and user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023"

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.