CVE-2024-52924

HIGH

Samsung Exynos Firmware - Stack-based Buffer Overflow in NRMM Registration Accept Message Decoding

Title source: llm

Description

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Lack of boundary check during the decoding of Registration Accept messages can lead to out-of-bounds writes on the stack

References (1)

Core 1

Core References

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Scores

CVSS v3 7.5

EPSS 0.0019

EPSS Percentile 40.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-121

Status published

Products (20)

samsung/exynos_1080_firmware

samsung/exynos_1280_firmware

samsung/exynos_1330_firmware

samsung/exynos_1380_firmware

samsung/exynos_1480_firmware

samsung/exynos_2100_firmware

samsung/exynos_2200_firmware

samsung/exynos_2400_firmware

samsung/exynos_850_firmware

samsung/exynos_9110_firmware

... and 10 more

Published Mar 06, 2025

Tracked Since Feb 18, 2026