CVE-2023-30738
An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - mobile.security@samsung.com
- Published
- 2023-10-04
- Last modified
- 2024-09-19
Affected products
- Galaxy Book Firmware (Samsung)
- Galaxy Book Odyssey Firmware (Samsung)
- Galaxy Book Pro 360 Firmware (Samsung)
- Galaxy Book Pro Firmware (Samsung)
- Galaxy Book (Samsung Mobile)
- Galaxy Book Pro (Samsung Mobile)
- Galaxy Book Pro 360 And Galaxy Book Odyssey (Samsung Mobile)
References
- https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=10
