PT-2024-24620 · Samsung · Exynos W920+7
Published
2024-06-07
·
Updated
2024-08-19
·
CVE-2024-32503
CVSS v3.1
8.4
High
| Vector | AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N |
Name of the Vulnerable Software and Affected Versions
Samsung Mobile Processor and Wearable Processor Exynos versions 850, 1080, 2100, 1280, 1380, 1330, W920, W930
Description
An issue was discovered in the Samsung Mobile Processor and Wearable Processor, where the mobile processor lacks proper memory deallocation checking. This can result in a UAF (Use-After-Free) vulnerability. UAF refers to a situation where a program accesses memory after it has been freed, which can lead to unexpected behavior or crashes.
Recommendations
For Exynos 850, update to a version that includes proper memory deallocation checking.
For Exynos 1080, update to a version that includes proper memory deallocation checking.
For Exynos 2100, update to a version that includes proper memory deallocation checking.
For Exynos 1280, update to a version that includes proper memory deallocation checking.
For Exynos 1380, update to a version that includes proper memory deallocation checking.
For Exynos 1330, update to a version that includes proper memory deallocation checking.
For Exynos W920, update to a version that includes proper memory deallocation checking.
For Exynos W930, update to a version that includes proper memory deallocation checking.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Exynos 1080
Exynos 1280
Exynos 1330
Exynos 1380
Exynos 2100
Exynos 850
Exynos W920
Exynos W930