CVE-2024-56427

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-564285.5The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for th CVE-2024-564297.7itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to t CVE-2024-564302.9OpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp.CVE-2024-564319.8oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by th CVE-2024-564333.6shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user CVE-2024-564347.5UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the CVE-2024-564357.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-564367.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-564377.5Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability ma CVE-2024-564387.5Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect avai CVE-2024-564397.5Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-56445.4The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such