CVE-2023-36481: Input Validation
An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop.
Other sources
In TBD of TBD, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in :2024-03-05
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-36481.
What is the severity of CVE-2023-36481?
CVE-2023-36481 has a severity rating of 7.5, which is considered high.
What is the affected software for CVE-2023-36481?
The affected software for CVE-2023-36481 includes Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920.
How can this vulnerability be exploited?
This vulnerability can be exploited by an attacker by improperly handling PPP length parameter inconsistency, which can cause an infinite loop.
Is there a fix available for CVE-2023-36481?
Please refer to the reference link for information on available fixes and security updates for CVE-2023-36481.