{"id":"CVE-2024-56427","aliases":["A-373365664","EUVD-2025-14889","GHSA-6m6f-rwf2-ghvg","PUB-A-373365664"],"status":"published","title":"An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980...","description":"An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00269,"percentile":0.1927,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2025-05-14T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2025-06-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2025-06-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"samsung","product":"exynos_1080_firmware"},{"vendor":"samsung","product":"exynos_1280_firmware"},{"vendor":"samsung","product":"exynos_1330_firmware"},{"vendor":"samsung","product":"exynos_1380_firmware"},{"vendor":"samsung","product":"exynos_1480_firmware"},{"vendor":"samsung","product":"exynos_2100_firmware"},{"vendor":"samsung","product":"exynos_2200_firmware"},{"vendor":"samsung","product":"exynos_2400_firmware"},{"vendor":"samsung","product":"exynos_850_firmware"},{"vendor":"samsung","product":"exynos_9110_firmware"},{"vendor":"samsung","product":"exynos_980_firmware"},{"vendor":"samsung","product":"exynos_990_firmware"},{"vendor":"samsung","product":"exynos_modem_5123_firmware"},{"vendor":"samsung","product":"exynos_modem_5300_firmware"},{"vendor":"samsung","product":"exynos_modem_5400_firmware"},{"vendor":"samsung","product":"exynos_w1000_firmware"},{"vendor":"samsung","product":"exynos_w920_firmware"},{"vendor":"samsung","product":"exynos_w930_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["Vendor Advisory"]},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-56427/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56427"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-56427"},{"url":"https://github.com/advisories/GHSA-6m6f-rwf2-ghvg"},{"url":"https://source.android.com/security/bulletin/2025-06-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-56427","description":"An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target.","status":"published","published":"2025-05-14T00:00:00Z","modified":"2025-05-27T18:12:22.671Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:33:57.983942Z"}],"euvd":[{"id":"EUVD-2025-14889","description":"An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target.","status":"published","published":"2025-05-14T00:00:00Z","modified":"2025-05-27T18:12:22Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:37.949923Z"}],"ghsa":[{"id":"GHSA-6m6f-rwf2-ghvg","title":"An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980...","description":"An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target.","status":"published","published":"2025-05-14T21:31:20Z","modified":"2025-05-19T18:31:47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:02:21.433827Z"}],"nvd":[{"id":"CVE-2024-56427","description":"An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target.","status":"published","published":"2025-05-14T21:15:58.07Z","modified":"2026-06-17T08:12:10.137Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:10:46.40251Z"}],"osv":[{"id":"PUB-A-373365664","description":"In LteRrc_RohcBearerConfig of unknown, there is a possible out of bounds write due to memory corruption. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2025-06-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:08.76702Z"}]}}