Vulnerabilities

TI-2022-07495 CVE-2022-23432 · GHSA-v495-fr6m-f3x9

Improper input validation in Samsung Mobile Devices with Exynos chipsets

LOW 28

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00117 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-20

TI-2022-07494 CVE-2022-23431 · GHSA-2pxg-gfxf-6253

LOW 28

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00117 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-120

TI-2022-07492 CVE-2022-23428 · GHSA-49hc-g879-6v43

LOW 35

An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00152 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-120