CVE-2023-30694

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 10, 2023
Updated: Nov 7, 2023
CWE ID 787

Summary

CVE-2023-30694 is a vulnerability affecting the IpcTxPcscTransmitApdu function in libsec-ril before the SMR Aug-2023 Release 1. An attacker who can provide crafted input to this function can trigger an out-of-bounds write, leading to arbitrary code execution. This vulnerability poses a significant risk to local systems, making it crucial for users to update their libsec-ril packages to the latest release as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share