deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-26785
Published: 2025-05-14
Description: An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-26785/
CVE: CVE-2025-3875
Published: 2025-05-14
Description: Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header contains an (invalid) value "Spoofed Name  ", Thunderbird treats spoofed@example.com as the actual address. This vulnerability was fixed in Thunderbird 128.10.1 and Thunderbird 138.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1950629; https://www.mozilla.org/security/advisories/mfsa2025-34/; https://www.mozilla.org/security/advisories/mfsa2025-35/
CVE: CVE-2025-3877
Published: 2025-05-14
Description: Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed.  It was subsequently fixed in CVE-2025-5986.
CVE: CVE-2025-3909
Published: 2025-05-14
Description: Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested email attachment (message/rfc822) and setting its content type to application/pdf, Thunderbird may incorrectly render it as HTML when opened, allowing the embedded JavaScript to run without requiring a file download. This behavior relies on Thunderbird auto-saving the attachment to /tmp and linking to it via the file:/// protocol, potentially enabling JavaScript execution as part of the HTML. This vulnerability was fixed in Thunderbird 128.10.1 and Thunderbird 138.0.1.
CVSS Score: 8.1 (HIGH)
CWE: CWE-356
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1958376; https://www.mozilla.org/security/advisories/mfsa2025-34/; https://www.mozilla.org/security/advisories/mfsa2025-35/
CVE: CVE-2025-3932
Published: 2025-05-14
Description: It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web pages listed in the X-Mozilla-External-Attachment-URL header of an email. This vulnerability was fixed in Thunderbird 128.10.1 and Thunderbird 138.0.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-288
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1960412; https://www.mozilla.org/security/advisories/mfsa2025-34/; https://www.mozilla.org/security/advisories/mfsa2025-35/
CVE: CVE-2025-40595
Published: 2025-05-14
Description: A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0010
CVE: CVE-2025-44184
Published: 2025-05-14
Description: SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/cumakurt/CVE-SourceCodester-Best-Employee-Management-System-1.0/blob/main/CVE-2025-44184-SourceCodester-Best-Employee-Management-System-1.0-Stored%20XSS.md; https://www.sourcecodester.com/php/17689/best-employee-management-system-php.html; https://github.com/cumakurt/CVE-SourceCodester-Best-Employee-Management-System-1.0/blob/main/CVE-2025-44184-SourceCodester-Best-Employee-Management-System-1.0-Stored%20XSS.md
CVE: CVE-2025-44186
Published: 2025-05-14
Description: SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://github.com/cumakurt/CVE-SourceCodester-Best-Employee-Management-System-1.0/blob/main/CVE-2025-44186-SourceCodester-Best-Employee-Management-System-1.0-CSRF-in-User-Update.md; https://www.sourcecodester.com/php/17689/best-employee-management-system-php.html
CVE: CVE-2025-47701
Published: 2025-05-14
Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.drupal.org/sa-contrib-2025-047
CVE: CVE-2025-47702
Published: 2025-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal oEmbed Providers allows Cross-Site Scripting (XSS).This issue affects oEmbed Providers: from 0.0.0 before 2.2.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2025-048
CVE: CVE-2025-47703
Published: 2025-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.14.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2025-049
CVE: CVE-2025-47704
Published: 2025-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2025-050
CVE: CVE-2025-47705
Published: 2025-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal IFrame Remove Filter allows Cross-Site Scripting (XSS).This issue affects IFrame Remove Filter: from 2.0.0 before 2.0.5, from 7.X-1.0 through 7.X-1.5, from 1.0 through 1.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2025-051; https://www.herodevs.com/vulnerability-directory/cve-2025-47705
CVE: CVE-2025-47706
Published: 2025-05-14
Description: Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-294
References: https://www.drupal.org/sa-contrib-2025-052
CVE: CVE-2025-47707
Published: 2025-05-14
Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-288
References: https://www.drupal.org/sa-contrib-2025-053
CVE: CVE-2025-47708
Published: 2025-05-14
Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.drupal.org/sa-contrib-2025-054
CVE: CVE-2025-47709
Published: 2025-05-14
Description: Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://www.drupal.org/sa-contrib-2025-055
CVE: CVE-2025-47710
Published: 2025-05-14
Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
CVSS Score: 7.4 (HIGH)
CWE: CWE-288
References: https://www.drupal.org/sa-contrib-2025-056
CVE: CVE-2025-0130
Published: 2025-05-14
Description: A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode.

This issue does not affect Cloud NGFW or Prisma Access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://security.paloaltonetworks.com/CVE-2025-0130
CVE: CVE-2025-30663
Published: 2025-05-14
Description: Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-367
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25016
CVE: CVE-2025-30664
Published: 2025-05-14
Description: Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-79
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25017
CVE: CVE-2025-30665
Published: 2025-05-14
Description: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25018
CVE: CVE-2025-30666
Published: 2025-05-14
Description: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25018
CVE: CVE-2025-30667
Published: 2025-05-14
Description: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25019
CVE: CVE-2025-30668
Published: 2025-05-14
Description: Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-191
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25020
CVE: CVE-2025-46785
Published: 2025-05-14
Description: Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25021
CVE: CVE-2025-46786
Published: 2025-05-14
Description: Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25022
CVE: CVE-2025-4637
Published: 2025-05-14
Description: Divide By Zero vulnerability in davisking dlib allows 

remote attackers to cause a denial of service via a crafted file.

.This issue affects dlib: before <19.24.7.
CWE: CWE-369
References: https://github.com/davisking/dlib/pull/3058
CVE: CVE-2025-4638
Published: 2025-05-14
Description: A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary (PCL). This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic.

Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/PointCloudLibrary/pcl/blob/master/surface/CMakeLists.txt#L70; https://github.com/PointCloudLibrary/pcl/commit/502bd2b013ce635f21632d523aa8cf2e04f7b7ac; https://github.com/PointCloudLibrary/pcl/pull/6245
CVE: CVE-2025-4639
Published: 2025-05-14
Description: CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder() method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0.
CWE: CWE-611
References: https://github.com/Peergos/Peergos/pull/1267
CVE: CVE-2025-4664
Published: 2025-05-14
Description: Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html; https://issues.chromium.org/issues/415810136
CVE: CVE-2025-0131
Published: 2025-05-14
Description: An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user also successfully exploits a race condition, which makes this vulnerability difficult to exploit.
CWE: CWE-266
References: https://security.paloaltonetworks.com/CVE-2025-0131; https://www.opswat.com/docs/mdsdk/release-notes/cve-2025-0131
CVE: CVE-2025-0132
Published: 2025-05-14
Description: A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. 

The attacker must have network access to the Broker VM to exploit this issue.
CWE: CWE-306
References: https://security.paloaltonetworks.com/CVE-2025-0132
CVE: CVE-2025-0133
Published: 2025-05-14
Description: A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link. The primary risk is phishing attacks that can lead to credential theft—particularly if you enabled Clientless VPN.

There is no availability impact to GlobalProtect features or GlobalProtect users. Attackers cannot use this vulnerability to tamper with or modify contents or configurations of the GlobalProtect portal or gateways. The integrity impact of this vulnerability is limited to enabling an attacker to create phishing and credential-stealing links that appear to be hosted on the GlobalProtect portal.



For GlobalProtect users with Clientless VPN enabled, there is a limited impact on confidentiality due to inherent risks of Clientless VPN that facilitate credential theft. You can read more about this risk in the informational bulletin  PAN-SA-2025-0005 https://security.paloaltonetworks.com/PAN-SA-2025-0005   https://security.paloaltonetworks.com/PAN-SA-2025-0005 . There is no impact to confidentiality for GlobalProtect users if you did not enable (or you disable) Clientless VPN.
CWE: CWE-79
References: https://security.paloaltonetworks.com/CVE-2025-0133
CVE: CVE-2025-0134
Published: 2025-05-14
Description: A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM.
CWE: CWE-94
References: https://security.paloaltonetworks.com/CVE-2025-0134
CVE: CVE-2025-0135
Published: 2025-05-14
Description: An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app.

The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
CVSS Score: 3.3 (LOW)
CWE: CWE-266
References: https://security.paloaltonetworks.com/CVE-2025-0135
CVE: CVE-2025-0136
Published: 2025-05-14
Description: Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec.

This issue does not affect Cloud NGFWs, Prisma® Access instances, or  PAN-OS VM-Series firewalls.

NOTE: The AES-128-CCM encryption algorithm is not recommended for use.
CWE: CWE-319
References: https://security.paloaltonetworks.com/CVE-2025-0136
CVE: CVE-2025-0137
Published: 2025-05-14
Description: An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator.


The attacker must have network access to the management web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
CWE: CWE-83
References: https://security.paloaltonetworks.com/CVE-2025-0137
CVE: CVE-2025-0138
Published: 2025-05-14
Description: Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access.

Compute in Prisma Cloud Enterprise Edition is not affected by this issue.
CWE: CWE-613
References: https://security.paloaltonetworks.com/CVE-2025-0138
CVE: CVE-2025-2900
Published: 2025-05-14
Description: IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.ibm.com/support/pages/node/7233415
CVE: CVE-2025-33104
Published: 2025-05-14
Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7233438
CVE: CVE-2025-4640
Published: 2025-05-14
Description: Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.
CWE: CWE-787
References: https://github.com/PointCloudLibrary/pcl/blob/master/surface/CMakeLists.txt#L70; https://github.com/PointCloudLibrary/pcl/commit/502bd2b013ce635f21632d523aa8cf2e04f7b7ac; https://github.com/PointCloudLibrary/pcl/pull/6246
CVE: CVE-2025-4641
Published: 2025-05-14
Description: Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java.

This issue affects webdrivermanager: from 1.0.0 before 6.0.2.
CWE: CWE-611
References: https://github.com/bonigarcia/webdrivermanager/pull/1458
CVE: CVE-2024-45516
Published: 2025-05-14
Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0.12, 10.1.x before 10.1.4, and 8.8.15 before Patch 47. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, including malformed <img> tags with embedded JavaScript. The vulnerability is triggered when a user views a specially crafted email in the Classic UI, requiring no additional user interaction.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.4#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE: CVE-2024-57096
Published: 2025-05-14
Description: An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/paokuwansui/wps_exp/blob/main/README
CVE: CVE-2024-58101
Published: 2025-05-14
Description: Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://www.tarlogic.com/blog/cve-2024-58101
CVE: CVE-2025-25370
Published: 2025-05-14
Description: An issue in realme GT 2 (RMX3311) running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://realme.com; https://gist.github.com/krl5/4eeed04a065287489c2e606e6d48c1bc
CVE: CVE-2025-32363
Published: 2025-05-14
Description: mediDOK before 2.5.18.43 allows remote attackers to achieve remote code execution on a target system via deserialization of untrusted data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://code-white.com/public-vulnerability-list/#unauthenticated-remote-code-execution-via-deserialization-of-untrusted-data-in-m; https://medidok.de/aktuelles-neuigkeiten/; https://medidok.de/neueversionen/update-medidok-2-5-18-43-verfugbar/
CVE: CVE-2024-55569
Published: 2025-05-14
Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-55569/
CVE: CVE-2024-56427
Published: 2025-05-14
Description: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-56427/