CVEvulnerability

CVE-2024-27368

5.5 MEDIUM Published 2024-09-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-09-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-125

Description

An issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_received_frame_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read.

Affected configurations

• samsung exynos 980 firmware • samsung exynos 850 firmware • samsung exynos 1080 firmware • samsung exynos 1280 firmware • samsung exynos 1380 firmware • samsung exynos 1330 firmware • samsung exynos 1480 firmware • samsung exynos w920 firmware • samsung exynos w930 firmware

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References