Skip to content
OpenAdvisories
High · 7.1 CVE-2023-21489 EUVD-2023-25657GHSA-jqmg-5jqp-94q9

Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code.

Published May 4, 2023 · Updated Feb 12, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Selected Android 11, 12, 13 Qualcomm devices – < SMR May-2023 Release 1 SMR May-2023 Release 1

Advisories 1

References