Null Pointer Validation Vulnerability in Samsung Exynos Processors

CVE-2023-37368

What is CVE-2023-37368?

A vulnerability has been identified in the Samsung Exynos Mobile Processor and Automotive Processor series that involves insufficient validation of a NULL pointer in the Shannon MM Task. This flaw could be exploited through malformed NR MM packets, potentially leading to abnormal termination of affected systems. Models impacted include various iterations of Exynos processors and modems, raising important security concerns in affected devices. Users are advised to remain vigilant and consult Samsung’s security updates for remediation steps.

References