Description
Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
Recommended action
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
CISA remediation due date for U.S. federal agencies: 20 Jul 2023.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.