cve-2023-42567
Vulnerability from cvelistv5
Published
2023-12-05 02:44
Modified
2024-08-02 19:23
Severity ?
EPSS score ?
Summary
Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | Samsung Mobile | Samsung Mobile Devices | |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T19:23:40.112Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023\u0026month=12" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "affected", "product": "Samsung Mobile Devices", "vendor": "Samsung Mobile", "versions": [ { "status": "unaffected", "version": "SMR Dec-2023 Release in Android 14" } ] } ], "descriptions": [ { "lang": "en", "value": "Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "version": "3.1" }, "format": "CVSS" } ], "problemTypes": [ { "descriptions": [ { "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0026#39;Classic Buffer Overflow\u0026#39;)", "lang": "en" } ] } ], "providerMetadata": { "dateUpdated": "2023-12-05T02:44:24.433Z", "orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "SamsungMobile" }, "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023\u0026month=12" } ] } }, "cveMetadata": { "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "assignerShortName": "SamsungMobile", "cveId": "CVE-2023-42567", "datePublished": "2023-12-05T02:44:24.433Z", "dateReserved": "2023-09-11T23:55:08.355Z", "dateUpdated": "2024-08-02T19:23:40.112Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-42567\",\"sourceIdentifier\":\"mobile.security@samsung.com\",\"published\":\"2023-12-05T03:15:16.900\",\"lastModified\":\"2024-11-21T08:22:48.300\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de verificaci\u00f3n de tama\u00f1o inadecuado en softsimd anterior a SMR de diciembre de 2023, versi\u00f3n 1, permite el desbordamiento del b\u00fafer basado en pila.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"mobile.security@samsung.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.5,\"impactScore\":4.7},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAB2A0D7-8F4F-4128-AE09-D2658D793BF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A901EFE-90BA-474C-88D2-8A3E7D99C0E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD8B9CD3-063E-481E-BE7C-1628ADA71849\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CE09EF7-B024-4D79-9400-C8223CDFBB86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4ECB0B7A-590C-460C-878B-9A78CB37D259\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAFE015F-8130-4F10-A553-420F0BB2A132\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"ACEA385E-3931-4438-A2A9-0357651F9B48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DD1F78D-EA98-4825-A0EA-703196DDE5E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDDB3FBE-99EC-4763-961B-2C436D864A1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B02110E-71FB-495F-86CA-F2A4E55C0E42\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"931CC6D7-A42D-4482-B901-B539DFF89C3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF\"}]}]}],\"references\":[{\"url\":\"https://security.samsungmobile.com/securityUpdate.smsb?year=2023\u0026month=12\",\"source\":\"mobile.security@samsung.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security.samsungmobile.com/securityUpdate.smsb?year=2023\u0026month=12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}" } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.