CVE-2022-23428 HIGH

CVE-2022-23428

Vendor Samsung Mobile
Product Samsung Mobile Devices with Exynos chipsets
Weakness CWE-120
Published February 11, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

Key dates

02Disclosure timeline

February 11, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-57273 GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability CVE-2026-9403 Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow CVE-2018-25367 NASA openVSP 3.16.1 Denial of Service via Buffer Overflow CVE-2026-57275 GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability CVE-2026-20215 ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability