Skip to content
OpenAdvisories
High · 7.3 CVE-2023-21420 EUVD-2023-25588GHSA-4rmg-fpp8-38vv

Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution.

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Description

Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11) devices with Teegris – < SMR Jan-2023 Release 1 SMR Jan-2023 Release 1

References