CVE-2024-27385

EPSS 0.23%
Veröffentlicht 09.07.2024 21:15:12
Zuletzt bearbeitet 26.06.2025 20:46:41
Erkennungen
Login

A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on tag_len for rx coming from userspace, which can lead to heap overwrite.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 2 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Samsung ≫ Exynos 1380 Firmware Version -

Samsung ≫ Exynos 1380 Version -

Samsung ≫ Exynos 1480 Firmware Version -

Samsung ≫ Exynos 1480 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.138

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
MITRE	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27385/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-27385

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-27385

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-27385

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-27385