CVE-2024-29152

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280…

Medium · published June 4, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos Modem 5123, and Exynos Modem 5300. The baseband software does not properly check states specified by the RRC (Radio Resource Control) Reconfiguration message. This can lead to disclosure of sensitive information.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.5th percentile
Published
2024-06-04T00:00Z
EPSS history
Timeline
  • 04 JUN 00:00Z
    An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280…
    cvelistv5