CVE-2023-42537

Published Nov 7, 2023 CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Description
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-46970 An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Samsung Mobile
Published
Updated
Sep 17, 2024, 1:06 PM
Reserved
Sep 11, 2023, 11:55 PM
Status
Modified
Published
Nov 7, 2023, 8:15 AM
Modified
Jun 17, 2026, 6:24 AM