- Vendor / Project
- Samsung
- Product
- Mobile Devices
- Date added
- Sep 18, 2023
- Due date
- Oct 9, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-703
Description
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.