CVE-2023-30665

Vulnerability

An improper input validation vulnerability exists in the OnOemServiceMode function of libsec-ril on Samsung devices prior to the SMR Jul-2023 Release 1 [1]. This allows a local attacker to trigger an out-of-bounds read by providing crafted input to the function.

Exploitation

To exploit this vulnerability, an attacker must have local access to the device and be able to interact with the RIL (Radio Interface Layer) service. The attacker sends a malformed OEM service mode request that bypasses input validation, causing libsec-ril to read beyond the bounds of an allocated buffer.

Impact

Successful exploitation results in an out-of-bounds read, which could lead to information disclosure of sensitive kernel or process memory. The attacker gains no direct code execution but may obtain data useful for further attacks.

Mitigation

The vulnerability is patched in Samsung's SMR Jul-2023 Release 1 [1]. Users should update their devices to this security maintenance release or later. No workarounds are available for unpatched devices.