NetSight
high8.1

CVE-2024-39890

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, …

Impact

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC (Call Control). This can lead to an Out-of-Bounds write.

Affected products

VendorProductAffected versions
SamsungExynos Modem 5123 Firmware
All versions
SamsungExynos Modem 5300 Firmware
All versions
SamsungExynos 9820 Firmware
All versions
SamsungExynos 9825 Firmware
All versions
SamsungExynos 980 Firmware
All versions
SamsungExynos 990 Firmware
All versions
SamsungExynos 850 Firmware
All versions
SamsungExynos 1080 Firmware
All versions
SamsungExynos 2100 Firmware
All versions
SamsungExynos 1280 Firmware
All versions
SamsungExynos 2200 Firmware
All versions
SamsungExynos 1330 Firmware
All versions

Weakness classification

References