Information Disclosure Vulnerability in Samsung Mobile Processors
CVE-2024-27362
7.5HIGH
Summary
A specific vulnerability exists in Samsung's Exynos mobile processors where the system does not adequately validate the length of incoming data. This flaw could potentially enable unauthorized access to sensitive information, leading to data exposure and privacy risks. Affected models include Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400. Due diligence in monitoring updates and applying security patches is essential to mitigate risks associated with this vulnerability.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published