CVE-2024-27387

Katalog CVE

CVSS 7.8 · High EPSS 0,17%

Kerentanan Out-of-bounds Write pada samsung exynos 1080 firmware, samsung exynos 1280 firmware +7 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_rx_range_done_ind(), there is no input validation check on rtt_id coming from userspace, which can lead to a heap overwrite.

Rincian

Terbit di NVD

9 September 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/ advisory vendor
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27387/ advisory vendor