Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-21472 EUVD-2023-25640GHSA-x7f5-5fc5-8j42

Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrar…

Published Sep 3, 2025 · Updated Sep 3, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Apr-2023 Release in Selected Android 11, 12, 13 Exynos devices

Advisories 1

References