7.5

CVE-2024-52923

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Lack of a boundary check during the decoding of DL NAS Transport messages leads to a Denial of Service.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SamsungExynos 9820 Firmware Version-
   SamsungExynos 9820 Version-
SamsungExynos 9825 Firmware Version-
   SamsungExynos 9825 Version-
SamsungExynos 980 Firmware Version-
   SamsungExynos 980 Version-
SamsungExynos 990 Firmware Version-
   SamsungExynos 990 Version-
SamsungExynos 850 Firmware Version-
   SamsungExynos 850 Version-
SamsungExynos 1080 Firmware Version-
   SamsungExynos 1080 Version-
SamsungExynos 2100 Firmware Version-
   SamsungExynos 2100 Version-
SamsungExynos 1280 Firmware Version-
   SamsungExynos 1280 Version-
SamsungExynos 2200 Firmware Version-
   SamsungExynos 2200 Version-
SamsungExynos 1330 Firmware Version-
   SamsungExynos 1330 Version-
SamsungExynos 1380 Firmware Version-
   SamsungExynos 1380 Version-
SamsungExynos 1480 Firmware Version-
   SamsungExynos 1480 Version-
SamsungExynos 2400 Firmware Version-
   SamsungExynos 2400 Version-
SamsungExynos 9110 Firmware Version-
   SamsungExynos 9110 Version-
SamsungExynos W920 Firmware Version-
   SamsungExynos W920 Version-
SamsungExynos W930 Firmware Version-
   SamsungExynos W930 Version-
SamsungExynos W1000 Firmware Version-
   SamsungExynos W1000 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.409
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.