CVE-2023-42558
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 5, 2023
Updated: Dec 8, 2023
CWE ID 787
Summary
CVE-2023-42558 is a critical out-of-bounds write vulnerability affecting HDCP in the HAL (Hardware Abstraction Layer) before the SMR Dec-2023 Release 1. This issue enables an attacker to execute arbitrary code by overwriting memory outside of the intended boundaries. The vulnerability poses a significant risk, as an attacker could potentially gain full control over the affected system. It is strongly recommended that users install the latest security updates to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Samsung Android
Affected Vendors
- Samsung