Skip to content
OpenAdvisories
High · 7.1 CVE-2023-42561 EUVD-2023-46994GHSA-6rjv-jwj3-pw69

Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code.

Published Dec 5, 2023 · Updated May 29, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Dec-2023 Release in Selected Android 11, 12, 13, 14 Qualcomm devices

References