7

CVE-2024-39343

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Modem 5300. The baseband software does not properly check the length specified by the MM (Mobility Management) module, which can lead to Denial of Service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ Exynos 2100 Firmware Version -
   Samsung ≫ Exynos 2100 Version -
Samsung ≫ Exynos 1280 Firmware Version -
   Samsung ≫ Exynos 1280 Version -
Samsung ≫ Exynos 1330 Firmware Version -
   Samsung ≫ Exynos 1330 Version -
Samsung ≫ Exynos 1380 Firmware Version -
   Samsung ≫ Exynos 1380 Version -
Samsung ≫ Exynos 1480 Firmware Version -
   Samsung ≫ Exynos 1480 Version -
Samsung ≫ Exynos 2400 Firmware Version -
   Samsung ≫ Exynos 2400 Version -
Samsung ≫ Exynos 9110 Firmware Version -
   Samsung ≫ Exynos 9110 Version -
Samsung ≫ Exynos Modem 5123 Firmware Version -
   Samsung ≫ Exynos Modem 5123 Version -
Samsung ≫ Exynos Modem 5300 Firmware Version -
   Samsung ≫ Exynos Modem 5300 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.28
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
MITRE 7 2.2 4.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-1284 Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

https://semiconductor.samsung.com/support/quality-support/product-security-updates/
Vendor Advisory