medium5.5
CVE-2023-30738
An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Od…
Impact
An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Galaxy Book Firmware | before oct-2023 |
| Samsung | Galaxy Book Pro Firmware | before oct-2023 |
| Samsung | Galaxy Book Pro 360 Firmware | before oct-2023 |
| Samsung | Galaxy Book Odyssey Firmware | before oct-2023 |