CVE-2024-27381: Input Validation
An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframeut(), there is no input validation check on len coming from userspace, which can lead to a heap over-read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27381?
CVE-2024-27381 has a high severity due to the potential for heap over-read vulnerabilities.
How do I fix CVE-2024-27381?
To fix CVE-2024-27381, it is recommended to update to the latest firmware provided by Samsung for affected Exynos processors.
Which Samsung products are affected by CVE-2024-27381?
CVE-2024-27381 affects Samsung Mobile Processors Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330.
What type of vulnerability is CVE-2024-27381?
CVE-2024-27381 is classified as a heap over-read vulnerability due to lack of input validation.
Can CVE-2024-27381 be exploited remotely?
CVE-2024-27381 may allow for exploitation from userspace, potentially indicating remote exploitability depending on the context.