CVE-2023-30670

Vulnerability

An out-of-bounds write vulnerability exists in the BuildIpcFactoryDeviceTestEvent function of the libsec-ril library on Samsung devices. This flaw affects versions prior to the Samsung Mobile Security (SMR) Jul-2023 Release 1 [1]. The vulnerability is triggered when processing a specially crafted input, leading to a write beyond the allocated buffer.

Exploitation

A local attacker can exploit this vulnerability by sending a malicious input to the vulnerable function. No authentication is required beyond local access to the device. The attacker must be able to interact with the RIL (Radio Interface Layer) component, which is accessible to local processes [1].

Impact

Successful exploitation allows the attacker to execute arbitrary code in the context of the libsec-ril process, which runs with elevated privileges. This can lead to full compromise of the device, including unauthorized access to sensitive data and system control [1].

Mitigation

Samsung addressed this vulnerability in the SMR Jul-2023 Release 1 security update [1]. Users are advised to install the latest firmware update to remediate the issue. No workarounds are available.