CVE-2023-52432: Input Validation
Published Mar 5, 2024
·Updated
Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory.
Affected Software
47 affected components
Libsec libsec-ril<SMR Sep-2023 Release 1
Samsung android=13.0
Samsung android=13.0-smr-apr-2022-r1
Samsung android=13.0-smr-apr-2023-r1
Samsung android=13.0-smr-aug-2022-r1
Samsung android=13.0-smr-aug-2023-r1
Samsung android=13.0-smr-dec-2021-r1
Samsung android=13.0-smr-dec-2022-r1
Samsung android=13.0-smr-feb-2022-r1
Samsung android=13.0-smr-feb-2023-r1
Samsung android=13.0-smr-jan-2022-r1
Samsung android=13.0-smr-jan-2023-r1
Samsung android=13.0-smr-jul-2022-r1
Samsung android=13.0-smr-jul-2023-r1
Samsung android=13.0-smr-jun-2022-r1
Samsung android=13.0-smr-jun-2023-r1
Samsung android=13.0-smr-mar-2022-r1
Samsung android=13.0-smr-mar-2023-r1
Samsung android=13.0-smr-may-2022-r1
Samsung android=13.0-smr-may-2023-r1
Samsung android=13.0-smr-nov-2021-r1
Samsung android=13.0-smr-nov-2022-r1
Samsung android=13.0-smr-oct-2022-r1
Samsung android=13.0-smr-sep-2022-r1
Samsung android=14.0
Samsung android=14.0-smr-apr-2022-r1
Samsung android=14.0-smr-apr-2023-r1
Samsung android=14.0-smr-aug-2022-r1
Samsung android=14.0-smr-aug-2023-r1
Samsung android=14.0-smr-dec-2021-r1
Samsung android=14.0-smr-dec-2022-r1
Samsung android=14.0-smr-feb-2022-r1
Samsung android=14.0-smr-feb-2023-r1
Samsung android=14.0-smr-jan-2022-r1
Samsung android=14.0-smr-jan-2023-r1
Samsung android=14.0-smr-jul-2022-r1
Samsung android=14.0-smr-jul-2023-r1
Samsung android=14.0-smr-jun-2022-r1
Samsung android=14.0-smr-jun-2023-r1
Samsung android=14.0-smr-mar-2022-r1
Samsung android=14.0-smr-mar-2023-r1
Samsung android=14.0-smr-may-2022-r1
Samsung android=14.0-smr-may-2023-r1
Samsung android=14.0-smr-nov-2021-r1
Samsung android=14.0-smr-nov-2022-r1
Samsung android=14.0-smr-oct-2022-r1
Samsung android=14.0-smr-sep-2022-r1
Event History
Mar 5, 2024
CVE Published
via MITRE·04:41 AM
Data Sourced
via MITRE·04:41 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-52432?
CVE-2023-52432 has been classified as a high-severity vulnerability due to its potential for local attackers to exploit out-of-bounds memory writes.
2
How do I fix CVE-2023-52432?
To remediate CVE-2023-52432, upgrade to the SMR Sep-2023 Release 1 or later versions of libsec-ril.
3
What are the potential impacts of CVE-2023-52432 if exploited?
If successfully exploited, CVE-2023-52432 may allow local attackers to execute arbitrary code or crash the affected system.
4
Which software is affected by CVE-2023-52432?
CVE-2023-52432 affects libsec-ril versions prior to SMR Sep-2023 Release 1.
5
Who is the vendor associated with CVE-2023-52432?
The vendor associated with CVE-2023-52432 is Libsec.