Out-of-Bounds Write Vulnerability in Samsung Exynos Mobile and Wearable Processors

CVE-2024-56426

What is CVE-2024-56426?

A vulnerability exists in Samsung's Exynos mobile and wearable processors due to improper validation on incoming USB packets. This lack of length checks can potentially lead to out-of-bounds writes, allowing attackers to modify memory contents and execute arbitrary code. The affected processors include a range of Exynos models widely used in various devices, posing significant risks if exploited.

References