CVE-2023-36481

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Aug 28, 2023
Updated: Aug 31, 2023
CWE ID 120

Summary

CVE-2023-36481 is a vulnerability affecting multiple Samsung Exynos and Wearable Processors, including 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. This issue arises due to improper handling of PPP length parameters, resulting in an infinite loop. This inconsistency can create a potential risk for attackers to exploit and gain unauthorized access or cause denial-of-service conditions. Users are advised to apply patches or updates as soon as they become available to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share