CVE-2024-27361

Medium

Description

A vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, and Exynos 2400 that involves a time-of-check to time-of-use (TOCTOU) race condition, which can lead to a Denial of Service.

SeverityMedium
CVSS5.1
Exploit probability—
ProductSamsung Exynos 980 Firmware
PublishedJul 9, 2024
First seenJul 9, 2024
Weakness typeCWE-367CWE-367

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
samsung exynos_980_firmwareNo range specified—
samsung exynos_990_firmwareNo range specified—
samsung exynos_1080_firmwareNo range specified—
samsung exynos_2100_firmwareNo range specified—
samsung exynos_2200_firmwareNo range specified—
samsung exynos_1280_firmwareNo range specified—
samsung exynos_1380_firmwareNo range specified—
samsung exynos_2400_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.