CVE-2023-42557

Estado: ModificadaMedia (6.7)—

Vulnerabilidad de escritura fuera de los límites en libIfaaCa anterior a SMR Dec-2023 Release 1 permite a atacantes del sistema local ejecutar código arbitrario.

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 6.7

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.26%
Percentil entre todas las CVEs puntuadas: 17
Fecha de la puntuación: 8/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Samsung — Android

CWE

CWE-787

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2023-42557",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "mobile.security@samsung.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.6,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 0.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "mobile.security@samsung.com",
      "affectedData": [
        {
          "vendor": "Samsung Mobile",
          "product": "Samsung Mobile Devices",
          "versions": [
            {
              "status": "unaffected",
              "version": "SMR Dec-2023 Release in Android 12, 13, 14"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2023-12-05T03:15:15.220",
  "references": [
    {
      "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "mobile.security@samsung.com"
    },
    {
      "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de escritura fuera de los límites en libIfaaCa anterior a SMR Dec-2023 Release 1 permite a atacantes del sistema local ejecutar código arbitrario."
    }
  ],
  "lastModified": "2026-06-17T06:24:04.517",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:samsung:android:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B15E2F17-4050-4D0C-AA18-15D97D0D446F",
              "versionEndExcluding": "14.0",
              "versionStartIncluding": "12.0"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E"
            },
            {
              "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "mobile.security@samsung.com"
}