QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-27372

Back to search

CVE-2024-27372

Published: Jun 5, 2024

Modified: Aug 27, 2025

PUBLISHED

CVSS v3.1

6.7

MEDIUM

Description

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->infrastructure_ssid_len coming from userspace, which can lead to a heap overwrite.

VendorProductVersions

n/a

n/a

affected
n/a

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N

Attack Complexity

Low

Attack Vector

Local

Availability

High

Confidentiality

High

Integrity

High

Privileges Required

High

Scope

Unchanged

User Interaction

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now