← Back

CVE-2024-27385

nvd nist
Published: Jul 9, 2024Modified: Jun 26, 2025

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: MITRE (Secondary)

Description

A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on tag_len for rx coming from userspace, which can lead to heap overwrite.

Affected (2)

Samsung
2 products
Exynos 1380 Firmware
Exynos 1480 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exynos 1380 Firmware
All versions
Running on/withPlatform Versions
Samsung
Exynos 1380
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exynos 1480 Firmware
All versions
Running on/withPlatform Versions
Samsung
Exynos 1480
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.