CVE-2024-39343: Buffer Overflow
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Modem 5300. The baseband software does not properly check the length specified by the MM (Mobility Management) module, which can lead to Denial of Service.
Other sources
In nsExtractNetworkName of nsNetworkName.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2024-12-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39343?
CVE-2024-39343 is classified as a denial of service vulnerability in certain Samsung Mobile Processors and Modems.
How do I fix CVE-2024-39343?
To mitigate CVE-2024-39343, users should apply the latest security updates provided by Samsung for affected Exynos Mobile Processors and Modems.
Which devices are affected by CVE-2024-39343?
CVE-2024-39343 affects Samsung Exynos Mobile Processors including versions 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, as well as Modems versions 5123 and 5300.
Can CVE-2024-39343 be exploited remotely?
Yes, CVE-2024-39343 could potentially be exploited remotely resulting in a denial of service condition.
What are the potential impacts of CVE-2024-39343?
The potential impact of CVE-2024-39343 includes service interruptions due to the denial of service resulting from improper checks in the baseband software.