CVE-2024-27385: Input Validation

Published Jul 9, 2024

Updated

A vulnerability was discovered in the slsihandlenanrxeventlogind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on taglen for rx coming from userspace, which can lead to heap overwrite.

Affected Software

6 affected components

Samsung Mobile Processor Exynos 1380

Samsung Mobile Processor Exynos 1480

All of the following

Samsung Exynos 1380 Firmware

Samsung Exynos 1380

All of the following

Samsung Exynos 1480 Firmware

Samsung Exynos 1480

Event History

Jul 9, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-27385?

CVE-2024-27385 has a high severity rating due to the potential for heap overwrite vulnerabilities in Samsung Mobile Processors.

How do I fix CVE-2024-27385?

To fix CVE-2024-27385, apply the latest firmware updates provided by Samsung for the Exynos 1380 and Exynos 1480 processors.

Which devices are affected by CVE-2024-27385?

CVE-2024-27385 affects the Samsung Mobile Processor Exynos 1380 and Exynos 1480.

What is the impact of CVE-2024-27385?

The impact of CVE-2024-27385 includes the potential for attackers to exploit the vulnerability leading to memory corruption and system instability.

Is there a workaround for CVE-2024-27385?

Currently, there is no known workaround for CVE-2024-27385; updating the firmware is the recommended action.