Lucene search

K
nvd[email protected]NVD:CVE-2024-31957
HistoryJul 09, 2024 - 6:15 p.m.

CVE-2024-31957

2024-07-0918:15:10
CWE-1284
web.nvd.nist.gov
6
samsung
exynos
processors
vulnerability
dos
attack
unmapping
invalid length

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

16.4%

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoS(Denial of Service) attack by unmapping an invalid length.

Affected configurations

Nvd
Node
samsungexynos_2200_firmwareMatch-
AND
samsungexynos_2200Match-
Node
samsungexynos_2400_firmwareMatch-
AND
samsungexynos_2400Match-
VendorProductVersionCPE
samsungexynos_2200_firmware-cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
samsungexynos_2200-cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*
samsungexynos_2400_firmware-cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
samsungexynos_2400-cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

16.4%

Related for NVD:CVE-2024-31957