1. Home
  2. CVE Database
  3. CVE-2024-39890
HIGH · 8.1

CVE-2024-39890

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123...

Vulnerability Description

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC (Call Control). This can lead to an Out-of-Bounds write.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SamsungExynos Modem 5123 Firmware-
SamsungExynos Modem 5123-
SamsungExynos Modem 5300 Firmware-
SamsungExynos Modem 5300-
SamsungExynos 9820 Firmware-
SamsungExynos 9820-
SamsungExynos 9825 Firmware-
SamsungExynos 9825-
SamsungExynos 980 Firmware-
SamsungExynos 980-
SamsungExynos 990 Firmware-
SamsungExynos 990-
SamsungExynos 850 Firmware-
SamsungExynos 850-
SamsungExynos 1080 Firmware-
SamsungExynos 1080-
SamsungExynos 2100 Firmware-
SamsungExynos 2100-
SamsungExynos 1280 Firmware-
SamsungExynos 1280-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2024-39890?

CVE-2024-39890 is a vulnerability with a CVSS score of 8.1 (HIGH). An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123...

How severe is CVE-2024-39890?

CVE-2024-39890 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-39890?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Exynos Modem 5123 Firmware, Samsung Exynos Modem 5123, Samsung Exynos Modem 5300 Firmware, Samsung Exynos Modem 5300, Samsung Exynos 9820 Firmware.