Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
9c50ff143c62a143edb0117/phpseclib/File/ASN1.php#L1129 - https://gist.github.com/katzj/ee72f3c2a00590812b2ea3c0c8890e0b - https://lists.debian.org/debian-lts-announce/2024/03/msg00002.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00003.html
CVE ID: CVE-2024-27356 State: PUBLISHED Published: 2024-02-27T00:00:00.000Z Last Updated: 2025-03-24T15:44:54.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, a
4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md
CVE ID: CVE-2024-27357 State: PUBLISHED Published: 2024-07-26T00:00:00 Last Updated: 2024-08-02T00:34:52.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. Local Privilege Escalation can occur during installations or updates by admins. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories/cve-2024-27357
CVE ID: CVE-2024-27358 State: PUBLISHED Published: 2024-07-26T00:00:00 Last Updated: 2024-11-01T14:26:35.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories/cve-2024-27358
CVE ID: CVE-2024-27359 State: PUBLISHED Published: 2024-02-25T00:00:00 Last Updated: 2024-08-05T18:01:32.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1. Additional Analy
r, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories/cve-2034-n1
CVE ID: CVE-2024-27360 State: PUBLISHED Published: 2024-07-09T00:00:00.000Z Last Updated: 2025-08-27T15:44:24.260Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exynos W930 where they do not properly check length of the data, which can lead to a Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor
eferences: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27360/
CVE ID: CVE-2024-27361 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-10-27T14:08:54.278Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:L/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, and Exynos 2400 that involves a time-of-check to time-of-use (TOCTOU) race condition, which can lead to a Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://s
Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27361/
CVE ID: CVE-2024-27362 State: PUBLISHED Published: 2024-07-09T00:00:00.000Z Last Updated: 2025-03-20T13:27:37.679Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not properly check the length of the data, which can lead to a Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/qualit
nductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27362/
CVE ID: CVE-2024-27363 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-12-04T21:05:17.715Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Samsung Mobile Processor Exynos 850, Exynos 9610, Exynos 980, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, and Exynos W930 where it does not properly check a pointer address, which can lead to a Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.sa
rences: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27363/
CVE ID: CVE-2024-27364 State: PUBLISHED Published: 2024-09-09T00:00:00.000Z Last Updated: 2025-03-20T21:23:10.912Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_roamed_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-suppo
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27364/
CVE ID: CVE-2024-27365 State: PUBLISHED Published: 2024-09-09T00:00:00.000Z Last Updated: 2025-03-14T16:12:01.344Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_blockack_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27365/
CVE ID: CVE-2024-27366 State: PUBLISHED Published: 2024-09-09T00:00:00.000Z Last Updated: 2025-03-25T15:52:28.182Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_scan_done_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/sup
l heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27366/
CVE ID: CVE-2024-27367 State: PUBLISHED Published: 2024-09-09T00:00:00.000Z Last Updated: 2025-03-14T13:16:02.411Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_scan_ind(), there is no input validation check on a length coming from userspace, which can lead to integer overflow and a potential heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.
and a potential heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27367/
CVE ID: CVE-2024-27368 State: PUBLISHED Published: 2024-09-09T00:00:00.000Z Last Updated: 2025-03-18T20:45:31.250Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_received_frame_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semicon
can lead to a potential heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27370 State: PUBLISHED Published: 2024-06-05T18:35:54.766Z Last Updated: 2025-02-13T15:47:24.411Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on hal_req->num_config_discovery_attr coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/produ
rogram Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27371 State: PUBLISHED Published: 2024-06-05T18:41:01.268Z Last Updated: 2025-02-13T15:47:25.016Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->service_specific_info_len coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/pro
Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27372 State: PUBLISHED Published: 2024-06-05T18:37:25.259Z Last Updated: 2025-08-27T15:47:52.052Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->infrastructure_ssid_len coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/produ
CVE ID: CVE-2024-27373 State: PUBLISHED Published: 2024-06-05T18:40:04.451Z Last Updated: 2025-03-25T17:57:23.406Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->mesh_id_len coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-
ment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27374 State: PUBLISHED Published: 2024-06-05T18:39:29.552Z Last Updated: 2025-02-13T15:47:26.637Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_publish_get_nl_params(), there is no input validation check on hal_req->service_specific_info_len coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/prod
ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27375 State: PUBLISHED Published: 2024-06-05T18:38:14.763Z Last Updated: 2025-02-13T15:47:27.180Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->sdea_service_specific_info_len coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-suppor
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27376 State: PUBLISHED Published: 2024-06-05T18:30:45.980Z Last Updated: 2025-03-25T13:56:24.786Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_nl_params(), there is no input validation check on hal_req->rx_match_filter_len coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-
ram Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27377 State: PUBLISHED Published: 2024-06-05T18:36:45.681Z Last Updated: 2025-03-28T23:10:48.288Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_get_security_info_nl(), there is no input validation check on sec_info->key_info.body.pmk_info.pmk_len coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support
CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27378 State: PUBLISHED Published: 2024-06-05T18:32:12.511Z Last Updated: 2025-03-13T14:43:15.248Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame_cert(), there is no input validation check on len coming from userspace, which can lead to a heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27379 State: PUBLISHED Published: 2024-06-05T18:28:51.365Z Last Updated: 2025-03-28T23:30:06.281Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_nl_params(), there is no input validation check on hal_req->num_intf_addr_present coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/produc
DP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27380 State: PUBLISHED Published: 2024-06-05T18:29:55.546Z Last Updated: 2025-03-20T20:51:00.547Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_set_delayed_wakeup_type(), there is no input validation check on a length of ioctl_args->args[i] coming from userspace, which can lead to a heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-sec
lnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27381 State: PUBLISHED Published: 2024-06-05T18:34:36.142Z Last Updated: 2025-03-13T18:54:27.548Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame_ut(), there is no input validation check on len coming from userspace, which can lead to a heap over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27382 State: PUBLISHED Published: 2024-06-05T18:33:03.135Z Last Updated: 2025-03-18T15:19:14.395Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame(), there is no input validation check on len coming from userspace, which can lead to a heap over-read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27383 State: PUBLISHED Published: 2024-09-09T00:00:00.000Z Last Updated: 2025-03-18T19:46:16.521Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_get_scan_extra_ies(), there is no input validation check on default_ies coming from userspace, which can lead to a heap overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-27385 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-08-02T00:34:52.408Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on tag_len for rx coming from userspace, which can lead to heap overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27385/
CVE ID: CVE-2024-27386 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-08-02T00:34:52.316Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on tag_len for tx coming from userspace, which can lead to heap overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/