VulnerabilityModified

CVE-2023-40218

An integer overflow can bypass detection of error cases via a crafted application.

LOW 3.3EPSS 0.18%

Does this matter?

Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application.

CVSS 3.1: 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS: 0.18% probability · 7th percentile
CISA KEV: Not listed
Weakness: CWE-190
Affected: samsung/exynos 9820 firmware · samsung/exynos 980 firmware · samsung/exynos 2100 firmware · samsung/exynos 2200 firmware · samsung/exynos 1280 firmware · samsung/exynos 1380 firmware
Source: cve@mitre.org

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.