CVE-2024-27370

The CVE-2024-27370 issue affects Samsung Mobile Processor Exynos 980, 850, 1280, 1380, and 1330. Root cause: in slsi_nan_config_get_nl_params(), there is no input validation for hal_req->num_config_discovery_attr from userspace, which can lead to a heap overwrite. Impact is described as high (...