CVE-2023-45864

Vulnerability

A race condition exists in the Samsung Mobile Processor Exynos series, specifically affecting models 9820, 980, 1080, 2100, 2200, 1280, and 1380 [1]. The issue allows unintended modifications of values within certain memory areas when concurrently accessed. No specific component or code path is named in the available references.

Exploitation

The attacker requires the ability to trigger a race window by causing concurrent access to the vulnerable memory area. The specific preconditions (e.g., local access, user interaction, or network position) are not detailed in the available references [1].

Impact

Successful exploitation could allow an attacker to modify values in the affected memory areas, potentially leading to privilege escalation, information disclosure, or denial of service. The precise impact depends on the memory area targeted and the context of the race condition [1].

Mitigation

Samsung has not yet disclosed a specific fix or workaround in the available references [1]. Users should monitor the Samsung Semiconductor Product Security Update page for future patches. No KEV listing is noted.