CVE-2023-30695

MEDIUM

Samsung Galaxy Book Go/Go 5G/Book2 Go/Book2 Pro 360 Firmware - Out-of-bounds Write in SSHDCPAPP TA

Title source: llm

Description

Out-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.

References (1)

Core 1

Core References

Vendor Advisory

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08

Scores

CVSS v3 6.7

EPSS 0.0004

EPSS Percentile 11.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-787

Status published

Products (4)

samsung/galaxy_book2_go_firmware

samsung/galaxy_book2_pro_360_firmware

samsung/galaxy_book_go_5g_firmware

samsung/galaxy_book_go_firmware

Published Aug 10, 2023

Tracked Since Feb 18, 2026