CVE-2024-31960
https://notcve.org/view.php?id=CVE-2024-31960
10 Sep 2024 — An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free. • https://semiconductor.samsung.com/support/quality-support/product-security-updates • CWE-416: Use After Free •
CVE-2024-27364
https://notcve.org/view.php?id=CVE-2024-27364
09 Sep 2024 — An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_roamed_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read. • https://semiconductor.samsung.com/support/quality-support/product-security-updates •
CVE-2024-27365
https://notcve.org/view.php?id=CVE-2024-27365
09 Sep 2024 — An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_blockack_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read. • https://semiconductor.samsung.com/support/quality-support/product-security-updates •
CVE-2024-27366
https://notcve.org/view.php?id=CVE-2024-27366
09 Sep 2024 — An issue was discovered in Samsung Mobile Processor, Wearable Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_scan_done_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read. • https://semiconductor.samsung.com/support/quality-support/product-security-updates •
CVE-2024-27367
https://notcve.org/view.php?id=CVE-2024-27367
09 Sep 2024 — An issue was discovered in Samsung Mobile Processor Exynos Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_scan_ind(), there is no input validation check on a length coming from userspace, which can lead to integer overflow and a potential heap over-read. • https://semiconductor.samsung.com/support/quality-support/product-security-updates •
CVE-2024-27368
https://notcve.org/view.php?id=CVE-2024-27368
09 Sep 2024 — An issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_received_frame_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read. • https://semiconductor.samsung.com/support/quality-support/product-security-updates •
CVE-2024-27383
https://notcve.org/view.php?id=CVE-2024-27383
09 Sep 2024 — An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_get_scan_extra_ies(), there is no input validation check on default_ies coming from userspace, which can lead to a heap overwrite. • https://semiconductor.samsung.com/support/quality-support/product-security-updates •
CVE-2024-27387
https://notcve.org/view.php?id=CVE-2024-27387
09 Sep 2024 — An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_rx_range_done_ind(), there is no input validation check on rtt_id coming from userspace, which can lead to a heap overwrite. • https://semiconductor.samsung.com/support/quality-support/product-security-updates •
CVE-2024-27385
https://notcve.org/view.php?id=CVE-2024-27385
09 Jul 2024 — A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on tag_len for rx coming from userspace, which can lead to heap overwrite. Se descubrió una vulnerabilidad en la función slsi_handle_nan_rx_event_log_ind en Samsung Mobile Processor Exynos 1380 y Exynos 1480 relacionada con la falta de verificación de validación de entrada en tag_len para rx provenientes del espacio de usuario, lo que pu... • https://semiconductor.samsung.com/support/quality-support/product-security-updates • CWE-20: Improper Input Validation •
CVE-2024-31956
https://notcve.org/view.php?id=CVE-2024-31956
13 Jun 2024 — An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks proper buffer length checking, which can result in an Out-of-Bounds Write. Se descubrió un problema en el procesador móvil Samsung Exynos 2200, Exynos 1480, Exynos 2400. Carece de una verificación adecuada de la longitud del búfer, lo que puede resultar en una escritura fuera de los límites. • https://semiconductor.samsung.com/support/quality-support/product-security-updates •