CVE-2023-30695

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-10 · updated 2026-06-17
Weakness: CWE-787

Description

Out-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.

Affected products

Samsung Galaxy Book2 Go Firmware: all versions
Samsung Galaxy Book2 Pro 360 Firmware: all versions
Samsung Galaxy Book Go 5G Firmware: all versions
Samsung Galaxy Book Go Firmware: all versions

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08

Get alerted when CVE-2023-30695 or the next vulnerability affects your stack