CVE-2024-56426
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target.
- Score
- CVSS 3.1 7.5 High
- Status
- Analyzed - cve@mitre.org
- Published
- 2025-11-04
- Last modified
- 2025-11-04
- Weaknesses
- CWE-787
Affected products
- Exynos 1080 Firmware (Samsung)
- Exynos 1280 Firmware (Samsung)
- Exynos 1330 Firmware (Samsung)
- Exynos 1380 Firmware (Samsung)
- Exynos 1480 Firmware (Samsung)
- Exynos 2100 Firmware (Samsung)
- Exynos 2200 Firmware (Samsung)
- Exynos 2400 Firmware (Samsung)
- Exynos 850 Firmware (Samsung)
- Exynos 980 Firmware (Samsung)
- Exynos 990 Firmware (Samsung)
- Exynos W1000 Firmware (Samsung)
- Exynos W920 Firmware (Samsung)
- Exynos W930 Firmware (Samsung)
References
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-56426/
