{"id":"CVE-2024-48883","aliases":["A-362957877","EUVD-2024-43221","GHSA-4vm9-jq4w-94v5","PUB-A-362957877"],"status":"published","title":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820,...","description":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, and Modem 5300. The UE incorrectly handles a malformed uplink scheduling message, resulting in an information leak of the UE.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00215,"percentile":0.12004,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-922"],"published":"2025-01-13T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2025-06-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2025-06-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"samsung","product":"exynos_1080_firmware"},{"vendor":"samsung","product":"exynos_1280_firmware"},{"vendor":"samsung","product":"exynos_1330_firmware"},{"vendor":"samsung","product":"exynos_1380_firmware"},{"vendor":"samsung","product":"exynos_1480_firmware"},{"vendor":"samsung","product":"exynos_2100_firmware"},{"vendor":"samsung","product":"exynos_2200_firmware"},{"vendor":"samsung","product":"exynos_2400_firmware"},{"vendor":"samsung","product":"exynos_850_firmware"},{"vendor":"samsung","product":"exynos_9110_firmware"},{"vendor":"samsung","product":"exynos_980_firmware"},{"vendor":"samsung","product":"exynos_9820_firmware"},{"vendor":"samsung","product":"exynos_9825_firmware"},{"vendor":"samsung","product":"exynos_990_firmware"},{"vendor":"samsung","product":"exynos_modem_5123_firmware"},{"vendor":"samsung","product":"exynos_modem_5300_firmware"},{"vendor":"samsung","product":"exynos_w1000_firmware"},{"vendor":"samsung","product":"exynos_w920_firmware"},{"vendor":"samsung","product":"exynos_w930_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["Vendor Advisory"]},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-48883/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48883"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-48883"},{"url":"https://github.com/advisories/GHSA-4vm9-jq4w-94v5"},{"url":"https://source.android.com/security/bulletin/2025-06-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-48883","description":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, and Modem 5300. The UE incorrectly handles a malformed uplink scheduling message, resulting in an information leak of the UE.","status":"published","published":"2025-01-13T00:00:00Z","modified":"2025-01-13T19:34:44.694Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:34:11.638716Z"}],"euvd":[{"id":"EUVD-2024-43221","description":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, and Modem 5300. The UE incorrectly handles a malformed uplink scheduling message, resulting in an information leak of the UE.","status":"published","published":"2025-01-13T00:00:00Z","modified":"2025-01-13T19:34:44Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:04:20.789419Z"}],"ghsa":[{"id":"GHSA-4vm9-jq4w-94v5","title":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820,...","description":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, and Modem 5300. The UE incorrectly handles a malformed uplink scheduling message, resulting in an information leak of the UE.","status":"published","published":"2025-01-13T18:31:55Z","modified":"2025-01-13T21:31:55Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:59:29.015568Z"}],"nvd":[{"id":"CVE-2024-48883","description":"An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, and Modem 5300. The UE incorrectly handles a malformed uplink scheduling message, resulting in an information leak of the UE.","status":"published","published":"2025-01-13T17:15:16.947Z","modified":"2026-06-17T07:58:57.813Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:10:42.329342Z"}],"osv":[{"id":"PUB-A-362957877","description":"In TBD of TBD, there is a possible information disclosure due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2025-06-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:17.76362Z"}]}}