CVEvulnerability
CVE-2024-31955
4.9 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-10-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.9 MEDIUM — CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
- Weaknesses
- CWE-295
Description
An issue was discovered in Samsung eMMC with KLMAG2GE4A and KLM8G1WEMB firmware. Code bypass through Electromagnetic Fault Injection allows an attacker to successfully authenticate and write to the RPMB (Replay Protected Memory Block) area without possessing secret information.
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/ semiconductor.samsung.com