First published: Thu Jul 06 2023(Updated: )
Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Android | =13.0-smr-apr-2023-r1 | |
Samsung Android | =13.0-smr-dec-2022-r1 | |
Samsung Android | =13.0-smr-feb-2023-r1 | |
Samsung Android | =13.0-smr-jan-2023-r1 | |
Samsung Android | =13.0-smr-jun-2023-r1 | |
Samsung Android | =13.0-smr-mar-2023-r1 | |
Samsung Android | =13.0-smr-may-2023-r1 | |
Samsung Android | =13.0-smr-nov-2022-r1 | |
Samsung Android | =13.0-smr-oct-2022-r1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-30658 is classified as a critical severity vulnerability due to improper input validation.
To fix CVE-2023-30658, update your device to the latest security patch provided by Samsung, specifically SMR Jul-2023 Release 1 or above.
CVE-2023-30658 affects Samsung Android version 13.0 prior to the SMR Jul-2023 Release 1.
Yes, local attackers can exploit CVE-2023-30658 to launch privileged activities on vulnerable devices.
Users of Samsung Android devices running versions before SMR Jul-2023 Release 1 should be especially vigilant about CVE-2023-30658.