Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-45185

Nov. 6, 2024, 7:35 p.m.

CVSS Score

5.1 / 10

Product(s) Impacted

Samsung Mobile Processor

Exynos 9820
Exynos 9825
Exynos 980
Exynos 990
Exynos 850
Exynos 1080
Exynos 2100
Exynos 1280
Exynos 2200
Exynos 1330
Exynos 1380
Exynos 1480
Exynos 2400
Exynos 9110
W920
W930
Modem 5123
Modem 5300

Description

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, Modem 5300. There is an out-of-bounds write due to a heap overflow in the GPRS protocol.

Weaknesses

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CWE ID: 787

Date

Published: Nov. 4, 2024, 8:15 p.m.

Last Modified: Nov. 6, 2024, 7:35 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

Base Score

5.1

Exploitability Score

2.5

Impact Score

2.5

Base Severity

MEDIUM

CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

References

https://semiconductor.samsung.com/ cve@mitre.org