Description
An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey | — | Firmware update Oct-2023 Release |
Advisories 1
- WID-SEC-2023-2547 UEFI Firmware: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Oct 26, 2023