{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-39890", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-12-03T16:04:58.814Z", "dateReserved": "2024-07-02T00:00:00", "datePublished": "2024-12-02T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-12-02T20:34:59.750757"}, "descriptions": [{"lang": "en", "value": "An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC (Call Control). This can lead to an Out-of-Bounds write."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-787", "lang": "en", "description": "CWE-787 Out-of-bounds Write"}]}], "affected": [{"vendor": "samsung", "product": "mobile_processor_wearable_processor_and_modems", "cpes": ["cpe:2.3:a:samsung:mobile_processor_wearable_processor_and_modems:exynos:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "9820", "status": "affected"}, {"version": "9825", "status": "affected"}, {"version": "980", "status": "affected"}, {"version": "990", "status": "affected"}, {"version": "850", "status": "affected"}, {"version": "1080", "status": "affected"}, {"version": "2100", "status": "affected"}, {"version": "1280", "status": "affected"}, {"version": "2200", "status": "affected"}, {"version": "1330", "status": "affected"}, {"version": "1380", "status": "affected"}, {"version": "1480", "status": "affected"}, {"version": "2400", "status": "affected"}, {"version": "9110", "status": "affected"}, {"version": "w920", "status": "affected"}, {"version": "w930", "status": "affected"}, {"version": "w1000", "status": "affected"}, {"version": "modem_5123", "status": "affected"}, {"version": "modem_5300", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-03T16:00:40.909918Z", "id": "CVE-2024-39890", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-03T16:04:58.814Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-39890", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-12-03T16:00:40.909918Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:samsung:mobile_processor_wearable_processor_and_modems:exynos:*:*:*:*:*:*:*"], "vendor": "samsung", "product": "mobile_processor_wearable_processor_and_modems", "versions": [{"status": "affected", "version": "9820"}, {"status": "affected", "version": "9825"}, {"status": "affected", "version": "980"}, {"status": "affected", "version": "990"}, {"status": "affected", "version": "850"}, {"status": "affected", "version": "1080"}, {"status": "affected", "version": "2100"}, {"status": "affected", "version": "1280"}, {"status": "affected", "version": "2200"}, {"status": "affected", "version": "1330"}, {"status": "affected", "version": "1380"}, {"status": "affected", "version": "1480"}, {"status": "affected", "version": "2400"}, {"status": "affected", "version": "9110"}, {"status": "affected", "version": "w920"}, {"status": "affected", "version": "w930"}, {"status": "affected", "version": "w1000"}, {"status": "affected", "version": "modem_5123"}, {"status": "affected", "version": "modem_5300"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-03T16:00:09.225Z"}}], "cna": {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC (Call Control). This can lead to an Out-of-Bounds write."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-12-02T20:34:59.750757"}}}, "cveMetadata": {"cveId": "CVE-2024-39890", "state": "PUBLISHED", "dateUpdated": "2024-12-03T16:04:58.814Z", "dateReserved": "2024-07-02T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-12-02T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC (Call Control). This can lead to an Out-of-Bounds write."}, {"lang": "es", "value": " Se ha descubierto un problema en los procesadores m\u00f3viles, los procesadores port\u00e1tiles y los m\u00f3dems Samsung Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, los m\u00f3dems 5123 y 5300. El software de banda base no comprueba correctamente la longitud especificada por el CC (control de llamadas). Esto puede provocar una escritura fuera de los l\u00edmites."}], "id": "CVE-2024-39890", "lastModified": "2024-12-03T16:15:22.483", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "[email protected]", "type": "Secondary"}]}, "published": "2024-12-02T21:15:10.483", "references": [{"source": "[email protected]", "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}