
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2023-42567 is a high-severity vulnerability affecting Samsung's softsimd component prior to SMR Dec-2023 Release 1. The vulnerability was discovered on July 16, 2023, and was reported by researcher byte3xr. It affects devices running Android 14 (Samsung Advisory).
The vulnerability is classified as an improper size check vulnerability that can lead to stack-based buffer overflow in the softsimd component. It has received a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is also tracked as SVE-2023-1350 in Samsung's security advisory system (NVD).
The vulnerability allows for stack-based buffer overflow, which could potentially lead to arbitrary code execution. The CVSS scoring indicates high impacts on confidentiality, integrity, and availability when successfully exploited (NVD).
Samsung has addressed this vulnerability by adding proper input validation check logic in the SMR Dec-2023 Release 1 security update. Users are advised to update their devices to the latest security patch level to protect against this vulnerability (Samsung Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."