CVE-2024-39343
Published: 02 December 2024
Summary
CVE-2024-39343 is a high-severity Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability in Samsung Exynos 2100 Firmware. Its CVSS base score is 7.0 (High).
Operationally, ranked in the top 21.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-38288
Vulnerability details
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Modem 5300. The baseband software does not properly check the length specified by the MM (Mobility Management)…
more
module, which can lead to Denial of Service.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.