CVE-2024-25074
MEDIUMDescription
An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check a pointer specified by the SM (Session Management module), which can lead to Denial of Service (Untrusted Pointer Dereference).
Is your site exposed to CVE-2024-25074?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| samsung | exynos_9820_firmware |
| samsung | exynos_9820 |
| samsung | exynos_9825_firmware |
| samsung | exynos_9825 |
| samsung | exynos_980_firmware |
| samsung | exynos_980 |
| samsung | exynos_990_firmware |
| samsung | exynos_990 |
| samsung | exynos_850_firmware |
| samsung | exynos_850 |
| samsung | exynos_1080_firmware |
| samsung | exynos_1080 |
| samsung | exynos_2100_firmware |
| samsung | exynos_2100 |
| samsung | exynos_2200_firmware |
| samsung | exynos_2200 |
| samsung | exynos_1280_firmware |
| samsung | exynos_1280 |
| samsung | exynos_1380_firmware |
| samsung | exynos_1380 |
| samsung | exynos_1330_firmware |
| samsung | exynos_1330 |
| samsung | exynos_9110_firmware |
| samsung | exynos_9110 |
| samsung | exynos_w920_firmware |
| samsung | exynos_w920 |
| samsung | exynos_w930_firmware |
| samsung | exynos_w930 |
| samsung | exynos_modem_5123_firmware |
| samsung | exynos_modem_5123 |
| samsung | exynos_modem_5300_firmware |
| samsung | exynos_modem_5300 |
References
Frequently Asked Questions
What is CVE-2024-25074? +
How severe is CVE-2024-25074? +
What products are affected by CVE-2024-25074? +
How do I check if I'm vulnerable to CVE-2024-25074? +
Related Vulnerabilities
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault …
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan().
In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the …
An arbitrary free vulnerability exists in the cv_close functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior …
It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a …
Memory corruption while reading ACPI config through the user mode app.