PT-2024-21851 · Samsung · Exynos W920+7

Chao Ma · Published 2024-07-09 · Updated 2024-07-11 · CVE-2024-27363

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AC:L/AV:L/A:H/C:H/I:N/PR:H/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 850, 9610, 980, 1280, 1380, 1330, W920, and W930

Description A vulnerability was discovered where the processor does not properly check a pointer address, which can lead to information disclosure.

Recommendations For Exynos 850, update to a version that properly checks pointer addresses. For Exynos 9610, update to a version that properly checks pointer addresses. For Exynos 980, update to a version that properly checks pointer addresses. For Exynos 1280, update to a version that properly checks pointer addresses. For Exynos 1380, update to a version that properly checks pointer addresses. For Exynos 1330, update to a version that properly checks pointer addresses. For Exynos W920, update to a version that properly checks pointer addresses. For Exynos W930, update to a version that properly checks pointer addresses.

Fix

Related Identifiers

CVE-2024-27363

Affected Products

Exynos 1280

Exynos 1330

Exynos 1380

Exynos 850

Exynos 9610

Exynos 980

Exynos W920

Exynos W930

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-27363 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Note
• https://t.me/cvedetector/451 · Telegram Post
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27363 · Note