{"id":"CVE-2024-39890","state":"PUBLISHED","title":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W93","description":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC (Call Control). This can lead to an Out-of-Bounds write.","publishedAt":"2024-12-02T00:00:00.000Z","updatedAt":"2024-12-03T16:04:58.814Z","severity":{"score":8.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N","source":"mitre"},"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://semiconductor.samsung.com/support/quality-support/product-security-updates/"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/39xxx/CVE-2024-39890.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-39890","state":"PUBLISHED","datePublished":"2024-12-02T00:00:00.000Z","dateUpdated":"2024-12-03T16:04:58.814Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2024-07-02T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC (Call Control). This can lead to an Out-of-Bounds write."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2024-12-02T20:34:59.750Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"samsung","product":"mobile_processor_wearable_processor_and_modems","defaultStatus":"unknown","versions":[{"version":"9820","status":"affected"},{"version":"9825","status":"affected"},{"version":"980","status":"affected"},{"version":"990","status":"affected"},{"version":"850","status":"affected"},{"version":"1080","status":"affected"},{"version":"2100","status":"affected"},{"version":"1280","status":"affected"},{"version":"2200","status":"affected"},{"version":"1330","status":"affected"},{"version":"1380","status":"affected"},{"version":"1480","status":"affected"},{"version":"2400","status":"affected"},{"version":"9110","status":"affected"},{"version":"w920","status":"affected"},{"version":"w930","status":"affected"},{"version":"w1000","status":"affected"},{"version":"modem_5123","status":"affected"},{"version":"modem_5300","status":"affected"}],"cpes":["cpe:2.3:a:samsung:mobile_processor_wearable_processor_and_modems:exynos:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-12-03T16:00:40.909918Z","id":"CVE-2024-39890","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","type":"CWE","lang":"en","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-12-03T16:04:58.814Z"}}]}}}