Technical Severity
MEDIUM
CVSS v3.1 Metrics
5
/ 10
Minimal Risk
Critical
Vector Specification
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Exploitation Likelihood
EPSS Prediction
0.16
%
Predictive Probability
Percentile Rank
36.7
th
Documented as more likely to be exploited than 36.7% of known CVEs.
Detection Date
Sep 18, 2023
Remediation Due
Oct 09, 2023
CISA Catalog Active
Threat Analysis
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
Remediation Directive
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.