Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-27362

A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not properly check the length of the data, which can lead to a Information disclosure.

Published

2024-07-09T18:15:09.573

Last Modified

2025-03-20T14:15:19.310

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.4 (MEDIUM)

Weaknesses

Type: Primary
CWE-1284
Type: Secondary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	samsung	exynos_1280_firmware	-	Yes
Hardware	samsung	exynos_1280	-	No
Operating System	samsung	exynos_2200_firmware	-	Yes
Hardware	samsung	exynos_2200	-	No
Operating System	samsung	exynos_1330_firmware	-	Yes
Hardware	samsung	exynos_1330	-	No
Operating System	samsung	exynos_1380_firmware	-	Yes
Hardware	samsung	exynos_1380	-	No
Operating System	samsung	exynos_2400_firmware	-	Yes
Hardware	samsung	exynos_2400	-	No

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory ([email protected])
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27362/ Vendor Advisory ([email protected])
https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27362/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)