5.9

CVE-2024-25074

An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check a pointer specified by the SM (Session Management module), which can lead to Denial of Service (Untrusted Pointer Dereference).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ Exynos 9820 Firmware Version -
   Samsung ≫ Exynos 9820 Version -
Samsung ≫ Exynos 9825 Firmware Version -
   Samsung ≫ Exynos 9825 Version -
Samsung ≫ Exynos 980 Firmware Version -
   Samsung ≫ Exynos 980 Version -
Samsung ≫ Exynos 990 Firmware Version -
   Samsung ≫ Exynos 990 Version -
Samsung ≫ Exynos 850 Firmware Version -
   Samsung ≫ Exynos 850 Version -
Samsung ≫ Exynos 1080 Firmware Version -
   Samsung ≫ Exynos 1080 Version -
Samsung ≫ Exynos 2100 Firmware Version -
   Samsung ≫ Exynos 2100 Version -
Samsung ≫ Exynos 2200 Firmware Version -
   Samsung ≫ Exynos 2200 Version -
Samsung ≫ Exynos 1280 Firmware Version -
   Samsung ≫ Exynos 1280 Version -
Samsung ≫ Exynos 1380 Firmware Version -
   Samsung ≫ Exynos 1380 Version -
Samsung ≫ Exynos 1330 Firmware Version -
   Samsung ≫ Exynos 1330 Version -
Samsung ≫ Exynos 9110 Firmware Version -
   Samsung ≫ Exynos 9110 Version -
Samsung ≫ Exynos W920 Firmware Version -
   Samsung ≫ Exynos W920 Version -
Samsung ≫ Exynos W930 Firmware Version -
   Samsung ≫ Exynos W930 Version -
Samsung ≫ Exynos Modem 5123 Firmware Version -
   Samsung ≫ Exynos Modem 5123 Version -
Samsung ≫ Exynos Modem 5300 Firmware Version -
   Samsung ≫ Exynos Modem 5300 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.302
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
MITRE 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-763 Release of Invalid Pointer or Reference

The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.

https://semiconductor.samsung.com/support/quality-support/product-security-updates/
Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-25074/
Vendor Advisory