VULNERABILITY INTELLIGENCE

CVE-2022-23432

CVSS score6.7 MEDIUM

EPSS probability0.12%

CISA KEVNot currently listed

Published2022-02-11

Last modified2026-06-17

Description

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.