CVE-2024-44068

Published Oct 7, 2024

Last updated a year ago

CVSS high 8.1

Zero-day

Mobile device

Overview

Description: An issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850,and W920. A Use-After-Free in the mobile processor leads to privilege escalation.
Source: cve@mitre.org
NVD status: Analyzed
Products: exynos_9820_firmware, exynos_9825_firmware, exynos_980_firmware, exynos_990_firmware, exynos_850_firmware, exynos_w920_firmware

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.1
Impact score: 5.9
Exploitability score: 2.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:samsung:exynos_9820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "1E582F31-BCC1-4276-BC34-A38EDCC4BB01",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:samsung:exynos_9820:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "1B8C35DE-1C58-4C6E-BB15-0E3C2FECB8DA",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:samsung:exynos_9825_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "7584E423-2C8E-4576-AB84-BC3A8351B3F9",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:samsung:exynos_9825:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "77A6027E-CD79-4DBD-B065-BE5AE7967F3B",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "5F18F62E-2012-442E-BE60-6E76325D1824",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "0D8701B6-6989-44D1-873A-A1823BFD7CCC",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "BCF6C91D-DECE-4630-85FE-C22EF2B9160A",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "87FE8214-E165-4874-BB5A-3C4298708039",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "1928760C-4FC4-45B0-84FF-C1105CD1DD2A",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "BB410A6D-642B-49AE-8B1C-EADA953A84DA",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "B6ADED27-EDAF-4FB3-8CB2-AE5F59B93641",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "4BF79654-E5C6-4DFF-B33A-A78571CD300C",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

Related CVEs

References