CVE-2024-31958

An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in an Out-of-Bounds Write.

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://semiconductor.samsung.com/support/quality-support/product-security-updates/	Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-06-07 17:15

Updated : 2025-06-26 20:46

NVD link : CVE-2024-31958

Mitre link : CVE-2024-31958

CVE.ORG link : CVE-2024-31958

JSON object : View

Products Affected

samsung

exynos_2200
exynos_1480_firmware
exynos_2200_firmware
exynos_2400_firmware
exynos_1480
exynos_2400

CWE

CWE-354

Improper Validation of Integrity Check Value

{"id": "CVE-2024-31958", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 2.5}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-06-07T17:15:50.353", "references": [{"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-354"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in an Out-of-Bounds Write."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en el procesador m\u00f3vil Samsung EExynos 2200, Exynos 1480, Exynos 2400. Carece de una verificaci\u00f3n para la validaci\u00f3n de identificadores nativos, lo que puede resultar en una escritura fuera de los l\u00edmites."}], "lastModified": "2025-06-26T20:46:29.500", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63C0D9AC-BD23-48C9-83E7-301DEC06E583"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64897B0D-EBF6-4BEB-BF54-ABCDBFAB45E0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3F328B4-0442-4748-B5EE-DD1CEE50D6CF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16D9272E-1794-48FF-B6A4-8F48395BA38E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "932F5FB3-5527-44D7-9DD9-EF03963E3CA3"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}