CVE-2024-27361

A vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, and Exynos 2400 that involves a time-of-check to time-of-use (TOCTOU) race condition, which can lead to a Denial of Service.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

History

26 Jun 2025, 20:54

Type Values Removed Values Added
First Time Samsung exynos 1280 Firmware
Samsung exynos 1080 Firmware
Samsung exynos 1080
Samsung exynos 980 Firmware
Samsung exynos 2100 Firmware
Samsung exynos 2200 Firmware
Samsung exynos 2400 Firmware
Samsung exynos 990
Samsung exynos 1280
Samsung exynos 980
Samsung exynos 1380
Samsung
Samsung exynos 2100
Samsung exynos 1380 Firmware
Samsung exynos 2400
Samsung exynos 990 Firmware
Samsung exynos 2200
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27361/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27361/ - Vendor Advisory
CPE cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*

21 Nov 2024, 09:04

Type Values Removed Values Added
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ -
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27361/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27361/ -

27 Oct 2024, 14:35

Type Values Removed Values Added
CWE CWE-367

11 Jul 2024, 13:06

Type Values Removed Values Added
Summary
  • (es) Se descubrió una vulnerabilidad en los procesadores móviles Samsung Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 y Exynos 2400 que involucra condición de ejecución time-of-check to time-of-use (TOCTOU) , que puede conducir a una Denegación de Servicio.

09 Jul 2024, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-09 20:15

Updated : 2025-06-26 20:54


NVD link : CVE-2024-27361

Mitre link : CVE-2024-27361

CVE.ORG link : CVE-2024-27361


JSON object : View

Products Affected

samsung

  • exynos_980_firmware
  • exynos_2100
  • exynos_2200
  • exynos_990_firmware
  • exynos_1080
  • exynos_1280_firmware
  • exynos_1280
  • exynos_2100_firmware
  • exynos_1080_firmware
  • exynos_2200_firmware
  • exynos_2400
  • exynos_1380
  • exynos_2400_firmware
  • exynos_1380_firmware
  • exynos_990
  • exynos_980
CWE
CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition