CVE-2024-27387

MEDIUM

6.7

Description

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_rx_range_done_ind(), there is no input validation check on rtt_id coming from userspace, which can lead to a heap overwrite.

Details CVE

Score CVSS v3.16.7

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurNONE

Publie9/9/2024

Derniere modification3/17/2025

Sourcenvd

Observations honeypot0

Produits affectes

samsung:exynos_1080samsung:exynos_1080_firmwaresamsung:exynos_1280samsung:exynos_1280_firmwaresamsung:exynos_1330samsung:exynos_1330_firmwaresamsung:exynos_1380samsung:exynos_1380_firmwaresamsung:exynos_1480samsung:exynos_1480_firmwaresamsung:exynos_850samsung:exynos_850_firmwaresamsung:exynos_980samsung:exynos_980_firmwaresamsung:exynos_w920samsung:exynos_w920_firmwaresamsung:exynos_w930samsung:exynos_w930_firmware

Faiblesses (CWE)

CWE-787CWE-787

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/(cve@mitre.org)

https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27387/(cve@mitre.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.