CVE-2023-30738: Samsung Galaxy Book Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption.

Affected products

• Samsung Galaxy Book Firmware: before oct-2023 (fixed in oct-2023)
• Samsung Galaxy Book Odyssey Firmware: before oct-2023 (fixed in oct-2023)
• Samsung Galaxy Book Pro 360 Firmware: before oct-2023 (fixed in oct-2023)
• Samsung Galaxy Book Pro Firmware: before oct-2023 (fixed in oct-2023)

Published 2023-10-04. Last modified 2026-06-17.