5.5
CVE-2024-27365
- EPSS 0.03%
- Published 09.09.2024 21:15:10
- Last modified 14.03.2025 17:15:43
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_blockack_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read.
Data is provided by the National Vulnerability Database (NVD)
Samsung ≫ Exynos 980 Firmware Version-
Samsung ≫ Exynos 850 Firmware Version-
Samsung ≫ Exynos 1080 Firmware Version-
Samsung ≫ Exynos 1280 Firmware Version-
Samsung ≫ Exynos 1380 Firmware Version-
Samsung ≫ Exynos 1330 Firmware Version-
Samsung ≫ Exynos 1480 Firmware Version-
Samsung ≫ Exynos W920 Firmware Version-
Samsung ≫ Exynos W930 Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.063 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| cve@mitre.org | 4.4 | 0.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.