CVE-2024-27380: Input Validation
An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisetdelayedwakeuptype(), there is no input validation check on a length of ioctlargs->args[i] coming from userspace, which can lead to a heap over-read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27380?
CVE-2024-27380 has been classified as a high-severity vulnerability due to the potential for heap over-read.
How do I fix CVE-2024-27380?
To mitigate CVE-2024-27380, users should apply the latest firmware updates provided by Samsung for the affected Exynos processors.
What devices are affected by CVE-2024-27380?
CVE-2024-27380 affects Samsung devices utilizing Exynos 980, 850, 1280, 1380, and 1330 processors.
What types of issues can result from CVE-2024-27380?
The vulnerability can lead to unauthorized access to potentially sensitive information due to a heap over-read.
Is CVE-2024-27380 being actively exploited?
As of now, there are no confirmed reports of active exploitation of CVE-2024-27380.