CVE-2024-49197

MEDIUM

Samsung Exynos 980 Firmware - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

An issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access.

Scores

CVSS v3 6.5
EPSS 0.0030
EPSS Percentile 52.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (10)
samsung/exynos_1080_firmware
samsung/exynos_1280_firmware
samsung/exynos_1330_firmware
samsung/exynos_1380_firmware
samsung/exynos_1480_firmware
samsung/exynos_850_firmware
samsung/exynos_980_firmware
samsung/exynos_w1000_firmware
samsung/exynos_w920_firmware
samsung/exynos_w930_firmware
Published May 27, 2025
Tracked Since Feb 18, 2026