Samsung Exynos 850 vulnerabilities, page 4

97 vulnerabilities

Known vulnerabilities in Samsung Exynos 850, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2024-27371samsung · exynos_1280_firmware +4 moresamsung exynos_1280_firmwareAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->service_specific_info_len coming from userspace, which can lead to a heap overwrite.EPSS0.20%5.5MediumCVE-2024-27368samsung · exynos_1080_firmware +8 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_received_frame_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read.EPSS0.16%7.8HighCVE-2024-27375samsung · exynos_1280_firmware +4 moresamsung exynos_1280_firmwareAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->sdea_service_specific_info_len coming from userspace, which can lead to a heap overwrite.EPSS0.20%7.8HighCVE-2024-27383samsung · exynos_1080_firmware +8 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_get_scan_extra_ies(), there is no input validation check on default_ies coming from userspace, which can lead to a heap overwrite.EPSS0.16%5.5MediumCVE-2024-27367samsung · exynos_1080_firmware +8 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor Exynos Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_scan_ind(), there is no input validation check on a length coming from userspace, which can lead to integer overflow and a potential heap over-read.EPSS0.16%5.5MediumCVE-2024-27366samsung · exynos_1080_firmware +8 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor, Wearable Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_scan_done_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read.EPSS0.16%5.5MediumCVE-2024-27365samsung · exynos_1080_firmware +8 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_blockack_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read.EPSS0.17%6MediumCVE-2024-27380samsung · exynos_1280_firmware +4 moresamsung exynos_1280_firmwareAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_set_delayed_wakeup_type(), there is no input validation check on a length of ioctl_args->args[i] coming from userspace, which can lead to a heap over-read.EPSS0.17%7.8HighCVE-2024-27376samsung · exynos_1280_firmware +4 moresamsung exynos_1280_firmwareAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_nl_params(), there is no input validation check on hal_req->rx_match_filter_len coming from userspace, which can lead to a heap overwrite.EPSS0.20%6.5MediumCVE-2024-46920samsung · exynos_1080_firmware +7 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadInputBuffers.EPSS0.35%5.3MediumCVE-2024-46919samsung · exynos_1080_firmware +7 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadOutputBuffers.EPSS0.29%8.1HighCVE-2024-44068samsung · exynos_850_firmware +5 moresamsung exynos_850_firmwareAn issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850,and W920. A Use-After-Free in the mobile processor leads to privilege escalation.EPSS1.02%5.1MediumCVE-2024-45185samsung · exynos_1080_firmware +17 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, Modem 5300. There is an out-of-bounds write due to a heap overflow in the GPRS protocol.EPSS0.18%6.2MediumCVE-2024-45184samsung · exynos_1080_firmware +17 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with chipset Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, and Modem 5300. A USAT out-of-bounds write due to a heap buffer overflow can lead to a Denial of Service.EPSS0.18%5.3MediumCVE-2024-28068samsung · exynos_1080_firmware +16 moresamsung exynos_1080_firmwareA vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, and Exynos Modem 5300 that involves a NULL pointer dereference which can cause abnormal termination of a mobile phone via a manipulated packet.EPSS0.23%6.5MediumCVE-2024-49197samsung · exynos_1080_firmware +9 moresamsung exynos_1080_firmwareAn issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access.EPSS0.25%8.4HighCVE-2024-32503samsung · exynos_1080_firmware +7 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper memory deallocation checking, which can result in a UAF (Use-After-Free) vulnerability.EPSS0.20%8.4HighCVE-2024-32502samsung · exynos_1080_firmware +7 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper reference count checking, which can result in a UAF (Use-After-Free) vulnerability.EPSS0.17%8.4HighCVE-2024-32504samsung · exynos_1080_firmware +7 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper length checking, which can result in an OOB (Out-of-Bounds) Write vulnerability.EPSS0.17%7.5HighCVE-2024-50600samsung · exynos_1080_firmware +9 moresamsung exynos_1080_firmwareAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access. An attacker can send a malformed message to the target through the Wi-Fi driver.EPSS0.41%