CVE-2022-23432: Input Validation
Published Feb 11, 2022
·Updated
An improper input validation in SMCSRPMBWSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
Affected Software
4 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
Samsung Exynos
Event History
Feb 11, 2022
CVE Published
via MITRE·05:40 PM
Data Sourced
via MITRE·05:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-23432?
CVE-2022-23432 is a vulnerability in the SMC_SRPMB_WSM handler of RPMB ldfw that allows arbitrary memory write and code execution.
2
What is the severity of CVE-2022-23432?
CVE-2022-23432 has a severity rating of 6.7 (medium).
3
Which software versions are affected by CVE-2022-23432?
CVE-2022-23432 affects Google Android versions 10.0, 11.0, and 12.0.
4
How can I fix CVE-2022-23432?
To fix CVE-2022-23432, apply the SMR Feb-2022 Release 1 update available from the Samsung security update website.
5
Is Samsung Exynos vulnerable to CVE-2022-23432?
No, Samsung Exynos is not vulnerable to CVE-2022-23432.