Description

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

Related CPE's

o

samsung

android

66

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08

Vendor Advisory

https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-787

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

4.4 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-10T02:15:10.807Z

3 years ago

Last modified

2026-06-17T05:55:23.387Z

3 months ago