CVE-2024-28068

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-28068
A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, and Exynos Modem 5300 that involves a NULL pointer dereference which can cause abnormal termination of a mobile phone via a manipulated packet.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-28068/
Configurations

No configuration.

History

20 Nov 2024, 17:35

Type Values Removed Values Added
CWE CWE-476

11 Jul 2024, 13:06

Type Values Removed Values Added
Summary
  • (es) Se descubrió una vulnerabilidad en SS en Procesador Móvil, Procesador Wearable y Módems Samsung con versiones Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330 , Exynos 2400, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123 y Exynos Modem 5300 que implica una desreferencia de puntero NULL que puede causar una terminación anormal de un teléfono móvil a través de un paquete manipulado.

09 Jul 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-09 20:15

Updated : 2024-11-20 17:35

NVD link : CVE-2024-28068

Mitre link : CVE-2024-28068

CVE.ORG link : CVE-2024-28068

JSON object : View

Products Affected

No product.

CWE
CWE-476

NULL Pointer Dereference