CVE-2024-31955

Published: Oct 15, 2024Modified: Jun 17, 2026Deferred

4.9

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

Exploitability: 0.5 / Impact: 4.0

Source: MITRE (Secondary)

Description

An issue was discovered in Samsung eMMC with KLMAG2GE4A and KLM8G1WEMB firmware. Code bypass through Electromagnetic Fault Injection allows an attacker to successfully authenticate and write to the RPMB (Replay Protected Memory Block) area without possessing secret information.

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (1)

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Source: cve@mitre.org

Timeline

No history available yet.