Heap Vulnerability in Samsung Mobile Processor Exynos Series

CVE-2024-27370

Summary

An issue has been reported in Samsung’s mobile processors, specifically in the Exynos series, where a lack of input validation in the function handling configuration parameters can lead to unintended heap memory modifications. This flaw arises in the context of processing requests from userspace, potentially allowing an attacker to perform heap overwrite operations, thereby compromising system integrity and leading to unauthorized access or execution of arbitrary code.

References