CVE-2024-27362

Katalog CVE

CVSS 7.5 · High EPSS 0,31%

Kerentanan Improper Validation of Specified Quantity in Input pada samsung exynos 1280 firmware, samsung exynos 2200 firmware +3 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not properly check the length of the data, which can lead to a Information disclosure.

Rincian

Terbit di NVD

9 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1284: Improper Validation of Specified Quantity in Input
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 22,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/ advisory vendor
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27362/ advisory vendor