CVE-2024-45184

MEDIUM

Published Oct 11, 2024 Modified Jun 17, 2025 CWE-120

Description

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with chipset Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, and Modem 5300. A USAT out-of-bounds write due to a heap buffer overflow can lead to a Denial of Service.

Is your site exposed to CVE-2024-45184?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.2

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-120 CWE-120

Affected Products

Vendor	Product	Versions
samsung	exynos_9820_firmware	All
samsung	exynos_9820	All
samsung	exynos_9825_firmware	All
samsung	exynos_9825	All
samsung	exynos_980_firmware	All
samsung	exynos_980	All
samsung	exynos_990_firmware	All
samsung	exynos_990	All
samsung	exynos_850_firmware	All
samsung	exynos_850	All
samsung	exynos_1080_firmware	All
samsung	exynos_1080	All
samsung	exynos_2100_firmware	All
samsung	exynos_2100	All
samsung	exynos_1280_firmware	All
samsung	exynos_1280	All
samsung	exynos_2200_firmware	All
samsung	exynos_2200	All
samsung	exynos_1330_firmware	All
samsung	exynos_1330	All
samsung	exynos_1380_firmware	All
samsung	exynos_1380	All
samsung	exynos_1480_firmware	All
samsung	exynos_1480	All
samsung	exynos_2400_firmware	All
samsung	exynos_2400	All
samsung	exynos_9110_firmware	All
samsung	exynos_9110	All
samsung	exynos_w920_firmware	All
samsung	exynos_w920	All
samsung	exynos_w930_firmware	All
samsung	exynos_w930	All
samsung	exynos_modem_5123_firmware	All
samsung	exynos_modem_5123	All
samsung	exynos_modem_5300_firmware	All
samsung	exynos_modem_5300	All

References

Advisories & Patches

https://semiconductor.samsung.com/support/quality-support/product-security-updates/ https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-45184/

Frequently Asked Questions

What is CVE-2024-45184? +

How severe is CVE-2024-45184? +

CVE-2024-45184 has a CVSS v3.1 score of 6.2 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-45184? +

CVE-2024-45184 affects products from samsung, specifically: exynos_1080, exynos_1080_firmware, exynos_1280, exynos_1280_firmware, exynos_1330, exynos_1330_firmware, exynos_1380, exynos_1380_firmware, exynos_1480, exynos_1480_firmware, exynos_2100, exynos_2100_firmware, exynos_2200, exynos_2200_firmware, exynos_2400, exynos_2400_firmware, exynos_850, exynos_850_firmware, exynos_9110, exynos_9110_firmware, exynos_980, exynos_980_firmware, exynos_9820, exynos_9820_firmware, exynos_9825, exynos_9825_firmware, exynos_990, exynos_990_firmware, exynos_modem_5123, exynos_modem_5123_firmware, exynos_modem_5300, exynos_modem_5300_firmware, exynos_w920, exynos_w920_firmware, exynos_w930, exynos_w930_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-45184? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-27820

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain …

CVE-2025-11698

A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious …

CVE-2025-12012

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data …

CVE-2025-12011

A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, …

CVE-2024-13503

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM …

CVE-2024-6199

An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and …