Out-of-bounds Write Vulnerability in Samsung Wearable Processor and Modems

CVE-2023-50807

What is CVE-2023-50807?

A security vulnerability has been identified in Samsung's Wearable Processor and Modems, specifically affecting models including the Exynos 9110, Exynos Modem 5123, and Exynos Modem 5300. This flaw allows out-of-bounds writes in the heap memory, posing risks without requiring authentication. Exploitation of this vulnerability may enable potential attackers to manipulate memory allocations, leading to unpredictable behavior or security breaches. Samsung has provided guidance on mitigating this issue through updates and security patches.

References