CVE-2023-40218

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Sep 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-402197.2Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized direcCVE-2023-40224.8The Herd Effects WordPress plugin before 5.2.3 does not sanitise and escape some of its settings, which could allow high privilege users sucCVE-2023-402204.4Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure viaCVE-2023-402218.8The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicCVE-2023-402227.8In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data wCVE-2023-402246.1MISP 2.4.174 allows XSS in app/View/Events/index.ctp.CVE-2023-402257.2HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, CVE-2023-40234.3The All Users Messenger WordPress plugin through 1.24 does not prevent non-administrator users from deleting messages from the all-users mesCVE-2023-402356.5An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the naCVE-2023-402365.3In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authenticatCVE-2023-402385.5A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.CVE-2023-402397.5Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version i
CVE-2023-40218: Low severity, CVSS 3.3 | Vulnix