CVE-2023-45864

Published: Dec 13, 2023Modified: May 22, 2025

4.7

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.0 / Impact: 3.6

Source: NVD

Description

A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modifications of values within certain areas.

Affected (7)

Products: Samsung: Exynos 9820 Firmware, Exynos 980 Firmware, Exynos 1080 Firmware, Exynos 2100 Firmware, Exynos 2200 Firmware, Exynos 1280 Firmware, Exynos 1380 Firmware

7 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Exynos 9820 Firmware	All versions

Running on/with	Platform Versions
Samsung Exynos 9820	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Exynos 980 Firmware	All versions

Running on/with	Platform Versions
Samsung Exynos 980	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Exynos 1080 Firmware	All versions

Running on/with	Platform Versions
Samsung Exynos 1080	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Exynos 2100 Firmware	All versions

Running on/with	Platform Versions
Samsung Exynos 2100	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Exynos 2200 Firmware	All versions

Running on/with	Platform Versions
Samsung Exynos 2200	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Exynos 1280 Firmware	All versions

Running on/with	Platform Versions
Samsung Exynos 1280	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Exynos 1380 Firmware	All versions

Running on/with	Platform Versions
Samsung Exynos 1380	All versions

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (2)

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Source: cve@mitre.org

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.