CVE-2024-56426

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
VendorProductVersion
samsungexynos_1080_firmware
-
samsungexynos_1280_firmware
-
samsungexynos_1330_firmware
-
samsungexynos_1380_firmware
-
samsungexynos_1480_firmware
-
samsungexynos_2200_firmware
-
samsungexynos_2400_firmware
-
samsungexynos_850_firmware
-
samsungexynos_980_firmware
-
samsungexynos_990_firmware
-
samsungexynos_2100_firmware
-
samsungexynos_w1000_firmware
-
samsungexynos_w920_firmware
-
samsungexynos_w930_firmware
-
𝑥
= Vulnerable software versions