CVE-2023-30739: Input Validation
Published Nov 7, 2023
ยทUpdated
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.
Affected Software
78 affected components
Samsung android=11.0
Samsung android=11.0-smr-apr-2021-r1
Samsung android=11.0-smr-apr-2022-r1
Samsung android=11.0-smr-apr-2023-r1
Samsung android=11.0-smr-aug-2021-r1
Samsung android=11.0-smr-aug-2022-r1
Samsung android=11.0-smr-aug-2023-r1
Samsung android=11.0-smr-dec-2020-r1
Samsung android=11.0-smr-dec-2021-r1
Samsung android=11.0-smr-dec-2022-r1
Samsung android=11.0-smr-dec-2023-r1
Samsung android=11.0-smr-feb-2021-r1
Samsung android=11.0-smr-feb-2022-r1
Samsung android=11.0-smr-feb-2023-r1
Samsung android=11.0-smr-jan-2021-r1
Samsung android=11.0-smr-jan-2022-r1
Samsung android=11.0-smr-jan-2023-r1
Samsung android=11.0-smr-jul-2021-r1
Samsung android=11.0-smr-jul-2022-r1
Samsung android=11.0-smr-jul-2023-r1
Samsung android=11.0-smr-jun-2021-r1
Samsung android=11.0-smr-jun-2022-r1
Samsung android=11.0-smr-jun-2023-r1
Samsung android=11.0-smr-mar-2021-r1
Samsung android=11.0-smr-mar-2022-r1
Samsung android=11.0-smr-mar-2023-r1
Samsung android=11.0-smr-may-2021-r1
Samsung android=11.0-smr-may-2022-r1
Samsung android=11.0-smr-may-2023-r1
Samsung android=11.0-smr-nov-2021-r1
Samsung android=11.0-smr-nov-2022-r1
Samsung android=11.0-smr-oct-2021-r1
Samsung android=11.0-smr-oct-2022-r1
Samsung android=11.0-smr-oct-2023-r1
Samsung android=11.0-smr-sep-2021-r1
Samsung android=11.0-smr-sep-2022-r1
Samsung android=11.0-smr-sep-2023-r1
Samsung android=12.0
Samsung android=12.0-smr-apr-2022-r1
Samsung android=12.0-smr-apr-2023-r1
Samsung android=12.0-smr-aug-2022-r1
Samsung android=12.0-smr-aug-2023-r1
Samsung android=12.0-smr-dec-2021-r1
Samsung android=12.0-smr-dec-2022-r1
Samsung android=12.0-smr-dec-2023-r1
Samsung android=12.0-smr-feb-2022-r1
Samsung android=12.0-smr-feb-2023-r1
Samsung android=12.0-smr-jan-2022-r1
Samsung android=12.0-smr-jan-2023-r1
Samsung android=12.0-smr-jul-2022-r1
Samsung android=12.0-smr-jul-2023-r1
Samsung android=12.0-smr-jun-2022-r1
Samsung android=12.0-smr-jun-2023-r1
Samsung android=12.0-smr-mar-2022-r1
Samsung android=12.0-smr-mar-2023-r1
Samsung android=12.0-smr-may-2022-r1
Samsung android=12.0-smr-may-2023-r1
Samsung android=12.0-smr-nov-2021-r1
Samsung android=12.0-smr-nov-2022-r1
Samsung android=12.0-smr-oct-2022-r1
Samsung android=12.0-smr-oct-2023-r1
Samsung android=12.0-smr-sep-2022-r1
Samsung android=12.0-smr-sep-2023-r1
Samsung android=13.0
Samsung android=13.0-smr-apr-2023-r1
Samsung android=13.0-smr-aug-2023-r1
Samsung android=13.0-smr-dec-2022-r1
Samsung android=13.0-smr-dec-2023-r1
Samsung android=13.0-smr-feb-2023-r1
Samsung android=13.0-smr-jan-2023-r1
Samsung android=13.0-smr-jul-2023-r1
Samsung android=13.0-smr-jun-2023-r1
Samsung android=13.0-smr-mar-2023-r1
Samsung android=13.0-smr-may-2023-r1
Samsung android=13.0-smr-nov-2022-r1
Samsung android=13.0-smr-oct-2022-r1
Samsung android=13.0-smr-oct-2023-r1
Samsung android=13.0-smr-sep-2023-r1
Event History
Nov 7, 2023
CVE Published
07:45 AM
Data Sourced
07:45 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-30739?
CVE-2023-30739 has been classified as a critical vulnerability that allows local attackers to execute arbitrary code.
2
How do I fix CVE-2023-30739?
To fix CVE-2023-30739, you should ensure that your Samsung Android device is updated to the SMR November 2023 Release 1 or a later version.
3
Who is affected by CVE-2023-30739?
CVE-2023-30739 affects Samsung Android devices running specific versions of Android 11.0 and 12.0 prior to the November 2023 release.
4
What type of vulnerability is CVE-2023-30739?
CVE-2023-30739 is categorized as an Arbitrary File Descriptor Write vulnerability in the libsec-ril library.
5
Can CVE-2023-30739 be exploited remotely?
No, CVE-2023-30739 requires local access to the device for exploitation.