Mahdi Braik

**Name of the Vulnerable Software and Affected Versions** SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" **Description** The issue is an Out-of-bounds Write vulnerability that allows a local attacker to execute arbitrary code. This vulnerability affects certain Samsung Galaxy book models, including Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go, and Galaxy book2 Pro 360, when using Windows Update. **Recommendations** For SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023", apply the "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" update from Windows Update to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" **Description** A stack overflow issue in SSHDCPAPP TA allows a local attacker to execute arbitrary code. This affects Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go, and Galaxy book2 Pro 360. **Recommendations** For SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023", apply the "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" update from Windows Update to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue is related to insufficient verification of multiple header signatures while loading a Trusted Application (TA), which may allow an attacker with privileges to gain code execution in that TA or the OS/kernel. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue is related to insufficient verification of a missing size check in the 'LoadModule' function, which may lead to an out-of-bounds write. This could potentially allow an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AMD Secure Processor (ASP) (affected versions not specified) **Description** The issue is related to insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE). This may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker-controlled data, resulting in a loss of confidentiality. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.