CVE-2023-42535

Out-of-bounds Write in readblock of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-42535

CVE-2023-42535 affects Samsung Mobile devices via an out-of-bounds write in the vold module’s read_block function, enabling a local attacker to execute arbitrary code. The issue is tied to Samsung’s pre-SMR Nov-2023 Release 1 patch level, with multiple sources confirming a local-exploit scenario ...