CVE-2024-27375

The CVE-2024-27375 issue affects Samsung Mobile Processor Exynos 980, 850, 1280, 1380, and 1330. The root cause is missing input validation in the function slsi_nan_followup_get_nl_params(), where the length hal_req->sdea_service_specific_info_len from userspace is not checked, enabling a pote...

CVE-2024-27372

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinanconfiggetnlparams, there is no input validation check on discattr-infrastructuressidlen coming from userspace, which can lead to a heap overwrite...

CVE-2024-27377

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinangetsecurityinfonl, there is no input validation check on secinfo-keyinfo.body.pmkinfo.pmklen coming from userspace, which can lead to a heap overwrite...

CVE-2024-27377

The CVE-2024-27377 entry concerns Samsung Mobile Processors (Exynos 980/850/1280/1380/1330). The root cause is missing input validation in slsi_nan_get_security_info_nl() for sec_info->key_info.body.pmk_info.pmk_len coming from userspace, which can trigger a heap overwrite. Documents identify ...

CVE-2024-27370

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinanconfiggetnlparams, there is no input validation check on halreq-numconfigdiscoveryattr coming from userspace, which can lead to a heap overwrite...

CVE-2024-27370

The CVE-2024-27370 issue affects Samsung Mobile Processor Exynos 980, 850, 1280, 1380, and 1330. Root cause: in slsi_nan_config_get_nl_params(), there is no input validation for hal_req->num_config_discovery_attr from userspace, which can lead to a heap overwrite. Impact is described as high (...

CVE-2024-27381

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframeut, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27381

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframeut, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27382

CVE-2024-27382 affects Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. The vulnerability lies in slsi_send_action_frame() where input length from userspace is not validated, leading to a heap over-read. Documented impact includes potential confidentiali...

CVE-2024-27382

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframe, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27382

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframe, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27378

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframecert, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27378

In the provided documents, CVE-2024-27378 affects Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. The flaw resides in the function slsi_send_action_frame_cert(), where there is no input validation for the len value from userspace, enabling a heap over-r...

CVE-2024-27376

CVE-2024-27376 affects Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. The issue is in slsi_nan_subscribe_get_nl_params(): there is no input validation for hal_req->rx_match_filter_len from userspace, which can lead to a heap overwrite. The connected...

CVE-2024-27380

CVE-2024-27380 affects Samsung Mobile Processors: Exynos 980, 850, 1280, 1380, and 1330. The issue is in the driver function slsi_set_delayed_wakeup_type() , where there is no input validation for the length of ioctl_args->args[i] coming from userspace, leading to a potential heap over-read . ...

CVE-2024-27379

CVE-2024-27379 affects Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. The vulnerability arises in function slsi_nan_subscribe_get_nl_params() where there is no input validation for hal_req->num_intf_addr_present from userspace, which can lead to a h...

CVE-2024-27379

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinansubscribegetnlparams, there is no input validation check on halreq-numintfaddrpresent coming from userspace, which can lead to a heap overwrite...

CVE-2024-27379

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinansubscribegetnlparams, there is no input validation check on halreq-numintfaddrpresent coming from userspace, which can lead to a heap overwrite...

PT-2024-21862 · Samsung · Exynos 1280 +4

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos 980 Samsung Mobile Processor Exynos 850 Samsung Mobile Processor Exynos 1280 Samsung Mobile Processor Exynos 1380 Samsung Mobile Processor Exynos 1330 Description: An issue was discovered in the function slsi n...

CVE-2023-50803

CVE-2023-50803 affects Samsung Mobile Processor baseband/modem (several Exynos models). The issue is that replay protection in NAS is not properly checked by the baseband, enabling potential denial of service. Connected sources confirm the vulnerability in Samsung Exynos modem stack and list DoS ...