PT-2024-28461 · Samsung · Samsung Exynos+1

Published 2024-12-02 · Updated 2025-07-01 · CVE-2024-39343

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Samsung Exynos versions 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110 Samsung Modem versions 5123, 5300

Description The baseband software does not properly check the length specified by the MM (Mobility Management) module, which can lead to Denial of Service. This issue affects Samsung Mobile Processor and Wearable Processor.

Recommendations For Samsung Exynos versions 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, and Samsung Modem versions 5123, 5300, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2024-39343

Affected Products

Samsung Exynos

Samsung Modem

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-39343 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://twitter.com/CVEnew/status/1863682832775700968 · Twitter Post
• https://t.me/cvedetector/11817 · Telegram Post
• https://twitter.com/TMJIntel/status/1866118854553780729 · Twitter Post
• https://twitter.com/xvonfers/status/1865112527098507610 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1864034079781392517 · Twitter Post
• https://t.me/cvenotify/127244 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1865941247585882532 · Twitter Post