BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-07

Assigner: MITRE

Description

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-11-07

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2024-56426

EUVD

EUVD-2025-37831

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	exynos_1080_firmware	*
samsung	exynos_1080	*
samsung	exynos_1280_firmware	*
samsung	exynos_1280	*
samsung	exynos_1330_firmware	*
samsung	exynos_1330	*
samsung	exynos_1380_firmware	*
samsung	exynos_1380	*
samsung	exynos_1480_firmware	*
samsung	exynos_1480	*
samsung	exynos_2200_firmware	*
samsung	exynos_2200	*
samsung	exynos_2400_firmware	*
samsung	exynos_2400	*
samsung	exynos_850_firmware	*
samsung	exynos_850	*
samsung	exynos_980_firmware	*
samsung	exynos_980	*
samsung	exynos_990_firmware	*
samsung	exynos_990	*
samsung	exynos_2100_firmware	*
samsung	exynos_2100	*
samsung	exynos_w1000_firmware	*
samsung	exynos_w1000	*
samsung	exynos_w920_firmware	*
samsung	exynos_w920	*
samsung	exynos_w930_firmware	*
samsung	exynos_w930	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in certain Samsung Mobile and Wearable Exynos processors where a lack of length checking allows malformed USB packets to cause out-of-bounds memory writes.

Impact Analysis

The vulnerability can lead to out-of-bounds writes in memory, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code or escalate privileges on affected devices.

Hi! I’m here to help you understand CVE-2024-56426. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70