CVE-2023-31115 Privilege escalation in n/a
A crafted application can alter the activation mode of the RCS component in Samsung Exynos modems, potentially leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-31115?
CVE-2023-31115 is a high-severity vulnerability in n/a, published on 7 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause changes to the activation mode of RCS via a crafted application.
Weakness: CWE-669
Which versions are affected by CVE-2023-31115?
It affects 2 products.
Products include Samsung Exynos 5123 Firmware, Samsung Exynos 5300 Firmware.
How do I fix CVE-2023-31115?
No fix has been published for CVE-2023-31115 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-31115 being exploited?
There is no known exploitation of CVE-2023-31115 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-q539-3f98-vmmm.