CVE-2023-50807

A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G no auth...

CVE-2024-27361

A vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, and Exynos 2400 that involves a time-of-check to time-of-use TOCTOU race condition, which can lead to a Denial of Service...

CVE-2024-28067

CVE-2024-28067 concerns Samsung Exynos Modem 5300. The available documents describe a vulnerability where a Man-in-the-Middle attacker can downgrade the security mode of packets sent to the victim, enabling plaintext messaging. Affected software is specified as Samsung Exynos Modem 5300; the root...

CVE-2024-31957

The CVE concerns Samsung Mobile Processors Exynos 2200 and Exynos 2400. Affected component: native handle validation check; root cause is lack of validation of native handles, which can enable a Denial of Service by unmapping an invalid length. Documented impact: availability impact (HIGH). Explo...

PT-2024-21849 · Samsung · Samsung Mobile Processor Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 980 through 2400 Description: A time-of-check to time-of-use TOCTOU race condition was discovered, which can lead to a Denial of Service. This issue affects various Samsung Mobile Processor Exynos...

CVE-2024-27360

Affected software/hardware: Samsung Mobile Processors (Exynos 850, 1080, 2100, 2200, 1280, 1380, 1330, W930).Root cause: improper validation of input data length, leading to Denial of Service.Impact: DoS condition; no details on exploitation vectors are provided in the sources.Status: multiple so...

CVE-2024-28068

A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos 9110, Exynos W920, Exynos...

CVE-2024-27386

A vulnerability was discovered in the slsihandlenanrxeventlogind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on taglen for tx coming from userspace, which can lead to heap overwrite...

CVE-2024-28068

A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos 9110, Exynos W920, Exynos...

CVE-2024-31957

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoSDenial of Service attack by unmapping an invalid length...

CVE-2024-27362

A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not properly check the length of the data, which can lead to a Information disclosure...

CVE-2024-27360

A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exynos W930 where they do not properly check length of the data, which can lead to a Denial of Service...

PT-2024-21848 · Samsung · Exynos 1330 +7

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processors Exynos 850 Samsung Mobile Processors Exynos 1080 Samsung Mobile Processors Exynos 2100 Samsung Mobile Processors Exynos 2200 Samsung Mobile Processors Exynos 1280 Samsung Mobile Processors Exynos 1380 Samsung Mobile...

CVE-2024-31957

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoSDenial of Service attack by unmapping an invalid length...

PT-2024-13973 · Samsung · Exynos Modem 5300 +2

Name of the Vulnerable Software and Affected Versions: Samsung Wearable Processor and Modems versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 Description: A vulnerability was discovered that allows an out-of-bounds write in the heap in 2G, which does not require authentication...

PT-2024-21873 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1380 through 1480 Description: A vulnerability was discovered in the slsi handle nan rx event log ind function related to no input validation check on tag len for tx coming from userspace, which can le...

PT-2024-22249 · Samsung · Exynos 9820 +6

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modems versions Exynos 9820 through Exynos 2400 Samsung Mobile Processor, Wearable Processor, and Modems versions Exynos 9110, Exynos W920, Exynos W930 Samsung Mobile Processor, Wearable...

CVE-2024-27362

CVE-2024-27362 affects Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400. The vulnerability stems from improper validation of input data length, which can lead to information disclosure. No exploitation details or active weaponization are provided in th...

PT-2024-24318 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processors Exynos versions 2200 through 2400 Description: A vulnerability was discovered in Samsung Mobile Processors where they lack a check for the validation of native handles, which can result in a Denial of Service attack ...

CVE-2024-27361

The CVE-2024-27361 entry describes a TOCTOU race condition in Samsung Mobile Processor Exynos family (models 980–2400). The vulnerability affects Exynos from 980 up through 2400 and can cause Denial of Service. The connected PT-2024-21849 security note states affected versions range 980–2400 and ...