CVE-2024-27375: Input Validation
An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinanfollowupgetnlparams(), there is no input validation check on halreq->sdeaservicespecificinfolen coming from userspace, which can lead to a heap overwrite.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27375?
CVE-2024-27375 has been assigned a moderate severity level due to the potential for a heap overflow.
How do I mitigate CVE-2024-27375?
To mitigate CVE-2024-27375, ensure that all relevant firmware for the affected Exynos processors is updated to the latest version provided by Samsung.
What are the affected devices for CVE-2024-27375?
CVE-2024-27375 affects Samsung Mobile Processors Exynos 980, 850, 1280, 1380, and 1330.
What kind of vulnerability is CVE-2024-27375?
CVE-2024-27375 is a heap overflow vulnerability resulting from insufficient input validation.
Is the vulnerability CVE-2024-27375 exploitable remotely?
Yes, CVE-2024-27375 can be potentially exploited by attackers from userspace, given the lack of input validation.