HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-32503

CVSS 8.4v3.1pub. 2024-06-07upd. 2024-11-21

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper memory deallocation checking, which can result in a UAF (Use-After-Free) vulnerability.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Samsung Exynos 1080

    HW
    Samsung
    all versions

  • Samsung Exynos 1080 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1280

    HW
    Samsung
    all versions

  • Samsung Exynos 1280 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1330

    HW
    Samsung
    all versions

  • Samsung Exynos 1330 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1380

    HW
    Samsung
    all versions

  • Samsung Exynos 1380 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2100

    HW
    Samsung
    all versions

  • Samsung Exynos 2100 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 850

    HW
    Samsung
    all versions

  • Samsung Exynos 850 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos W920

    HW
    Samsung
    all versions

  • Samsung Exynos W920 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos W930

    HW
    Samsung
    all versions

  • Samsung Exynos W930 Firmware

    OS
    Samsung
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2025-52908CRITICAL9.8PL ✓same product

Buffer overflow w sterowniku Wi-Fi Samsung Exynos przez błędną obsługę NL80211

CVE-2025-52909CRITICAL9.8PL ✓same product

Buffer overflow w sterowniku Wi-Fi Samsung Exynos przez NL80211

CVE-2025-62818CRITICAL9.8PL ✓same product

Out-of-bounds write w procesorach Samsung Exynos przy przetwarzaniu SMS TP-UD

CVE-2025-54328CRITICAL10.0PL ✓same product

Stack-based Buffer Overflow w obsłudze SMS w procesorach Samsung Exynos

CVE-2025-58349CRITICAL9.1PL ✓same product

Błąd obsługi pakietów LTE MAC w procesorach Samsung Exynos powoduje crash baseband