CVE-2024-27385

A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input…

Medium · published July 9, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on tag_len for rx coming from userspace, which can lead to heap overwrite.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Published
2024-07-09T00:00Z
EPSS history
Timeline
  • 09 JUL 00:00Z
    A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input…
    cvelistv5