7.5

CVE-2024-56426

EPSS 0.33%
Veröffentlicht 04.11.2025 00:00:00
Zuletzt bearbeitet 07.11.2025 12:59:47
Erkennungen
Login

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 14 VulnDex Vulnerability Enrichment 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Samsung ≫ Exynos 1080 Firmware Version -

Samsung ≫ Exynos 1080 Version -

Samsung ≫ Exynos 1280 Firmware Version -

Samsung ≫ Exynos 1280 Version -

Samsung ≫ Exynos 1330 Firmware Version -

Samsung ≫ Exynos 1330 Version -

Samsung ≫ Exynos 1380 Firmware Version -

Samsung ≫ Exynos 1380 Version -

Samsung ≫ Exynos 1480 Firmware Version -

Samsung ≫ Exynos 1480 Version -

Samsung ≫ Exynos 2200 Firmware Version -

Samsung ≫ Exynos 2200 Version -

Samsung ≫ Exynos 2400 Firmware Version -

Samsung ≫ Exynos 2400 Version -

Samsung ≫ Exynos 850 Firmware Version -

Samsung ≫ Exynos 850 Version -

Samsung ≫ Exynos 980 Firmware Version -

Samsung ≫ Exynos 980 Version -

Samsung ≫ Exynos 990 Firmware Version -

Samsung ≫ Exynos 990 Version -

Samsung ≫ Exynos 2100 Firmware Version -

Samsung ≫ Exynos 2100 Version -

Samsung ≫ Exynos W1000 Firmware Version -

Samsung ≫ Exynos W1000 Version -

Samsung ≫ Exynos W920 Firmware Version -

Samsung ≫ Exynos W920 Version -

Samsung ≫ Exynos W930 Firmware Version -

Samsung ≫ Exynos W930 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.33%	0.26

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-56426/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-56426

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-56426

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-56426

EUVD