Out-of-Bounds Write Vulnerability in Samsung Exynos Mobile and Wearable Processors

CVE-2024-32504

Summary

A vulnerability has been identified in several Samsung Exynos mobile and wearable processors, specifically regarding inadequate length checking during processing. This flaw may permit an Out-of-Bounds Write scenario, potentially leading to unauthorized access or manipulation of memory, which can compromise device integrity and user data security. Products affected include the Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, and Exynos W930. Mitigation steps are currently under review, and users are encouraged to stay updated through Samsung's official product security updates.

References