PT-2024-24320 · Samsung · Exynos 2200+2

Published 2024-06-07 · Updated 2025-06-26 · CVE-2024-31959

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 2200, 1480, 2400

Description An issue was discovered in Samsung Mobile Processor Exynos, where it lacks a check for the validation of native handles, which can result in code execution.

Recommendations For Exynos 2200, consider implementing additional validation checks for native handles to prevent code execution. For Exynos 1480, restrict access to sensitive areas of the processor to minimize the risk of exploitation. For Exynos 2400, as a temporary workaround, consider disabling the use of native handles until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2024-31959

Affected Products

Exynos 1480

Exynos 2200

Exynos 2400

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-31959 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://t.me/cvenotify/126801 · Telegram Post
• https://twitter.com/CVEnew/status/1799121924058120221 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1799147813441335483 · Twitter Post
• https://twitter.com/CveFindCom/status/1799124343194067039 · Twitter Post