Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Samsung · Mobile Devices
Date added (CISA)
2023-06-29
Remediation due
2023-07-20
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.