Back to feed
EUVD-2024-24576 · Published Jun 5, 2024
An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->infrastructure_ssid_len coming from userspace, which can lead to a heap overwrite.
Technologies
Samsung Exynos 1280 FirmwareSamsung Exynos 980Samsung Exynos 1380 FirmwareSamsung Exynos 1330Samsung Exynos 980 FirmwareSamsung Exynos 1330 FirmwareSamsung Exynos 1380Samsung Exynos 1280Samsung Exynos 850Samsung Exynos 850 Firmware
Weaknesses
CWE-122CWE-787
CVSS scores
- v3.17.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
