CVE-2024-50600
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access. An attacker can send a malformed message to the target through the Wi-Fi driver.
- Score
- CVSS 3.1 7.5 High
- Status
- Analyzed - cve@mitre.org
- Published
- 2025-03-06
- Last modified
- 2025-03-07
- Weaknesses
- CWE-125
Affected products
- Exynos 1080 Firmware (Samsung)
- Exynos 1280 Firmware (Samsung)
- Exynos 1330 Firmware (Samsung)
- Exynos 1380 Firmware (Samsung)
- Exynos 1480 Firmware (Samsung)
- Exynos 850 Firmware (Samsung)
- Exynos 980 Firmware (Samsung)
- Exynos W1000 Firmware (Samsung)
- Exynos W920 Firmware (Samsung)
- Exynos W930 Firmware (Samsung)
References
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/
