CVE-2024-39890

CVSS 8.1 HIGHEPSS 0.4%CWE-787

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.1EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

02 Dec 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC (Call Control). This can lead to an Out-of-Bounds write.

CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

Affected products

n/a · n/a

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/