Lucene search

K
cveMitreCVE-2024-31957
HistoryJul 09, 2024 - 6:15 p.m.

CVE-2024-31957

2024-07-0918:15:10
CWE-1284
mitre
web.nvd.nist.gov
32
samsung
exynos
vulnerability
dos
attack
validation
native handles
unmapping
invalid length

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

16.4%

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoS(Denial of Service) attack by unmapping an invalid length.

Affected configurations

Nvd
Node
samsungexynos_2200_firmwareMatch-
AND
samsungexynos_2200Match-
Node
samsungexynos_2400_firmwareMatch-
AND
samsungexynos_2400Match-
VendorProductVersionCPE
samsungexynos_2200_firmware-cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
samsungexynos_2200-cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*
samsungexynos_2400_firmware-cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
samsungexynos_2400-cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

16.4%

Related for CVE-2024-31957