CVE-2023-43122 Information disclosure in n/a

Medium 4.8 Published 13 Dec 2023 Updated 2 Aug 2024

An attacker can exploit a bootloader vulnerability in Samsung Exynos processors to disclose sensitive information.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2023-43122?

CVE-2023-43122 is a medium-severity vulnerability in Samsung Exynos 1080 Firmware, published on 13 Dec 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bootloader.

Weakness: CWE-787

Which versions are affected by CVE-2023-43122?

It affects 9 products.

Products include Samsung Exynos 1080 Firmware, Samsung Exynos 1280 Firmware, Samsung Exynos 1330 Firmware, Samsung Exynos 1380 Firmware, Samsung Exynos 2100 Firmware, Samsung Exynos 2200 Firmware and 3 more.

How do I fix CVE-2023-43122?

No fix has been published for CVE-2023-43122 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-43122 being exploited?

There is no known exploitation of CVE-2023-43122 in the wild and no public exploit code.

All Samsung Exynos 1080 Firmware vulnerabilities

Sources

Also known as GHSA-8g8w-39rg-5h28.