PT-2025-6695 · Samsung · Samsung Mobile Processor Exynos+1

Published 2024-08-25 · Updated 2025-06-20 · CVE-2024-46923

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 1480, 2200, and 2400

Description An issue was discovered in Samsung Mobile Processor Exynos. The absence of a null check leads to a Denial of Service at amdgpu cs ib fill in the Xclipse Driver.

Recommendations For Samsung Mobile Processor Exynos versions 1480, 2200, and 2400, consider disabling the amdgpu cs ib fill function in the Xclipse Driver as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

NULL Pointer Dereference

Weakness Enumeration

CWE-400

CWE-476

Related Identifiers

BDU:2025-10378

CVE-2024-46923

Affected Products

Samsung Mobile Processor Exynos

Xclipse Driver

References · 9

• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46923 · Security Note
• https://bdu.fstec.ru/vul/2025-10378 · Security Note
• https://cybersecurity-help.cz/vdb/SB2025020336 · Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-46923 · Note
• https://t.me/cvedetector/17944 · Telegram Post
• https://t.me/cvenotify/126298 · Telegram Post
• https://twitter.com/CVEnew/status/1890150890360959236 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1889918790567092248 · Twitter Post