Privilege escalation in Samsung Exynos



Published: 2024-10-22
Risk High
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2024-44068
CWE-ID CWE-416
Exploitation vector Local
Public exploit This vulnerability is being exploited in the wild.
Vulnerable software
Subscribe 		Exynos 9820
Mobile applications / Mobile firmware & hardware

Exynos 9825
Mobile applications / Mobile firmware & hardware

Exynos 990
Mobile applications / Mobile firmware & hardware

Exynos 980
Hardware solutions / Firmware

Exynos 850
Hardware solutions / Firmware

Exynos W920
Hardware solutions / Firmware

Vendor Samsung

Security Bulletin

This security bulletin contains one high risk vulnerability.

1) Use-after-free

EUVDB-ID: #VU99260

Risk: High

CVSSv3.1: 8.4 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2024-44068

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in the mobile processor. A local application can execute arbitrary code with elevated privileges.

Note, the vulnerability is being actively exploited in the wild.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Exynos 9820: All versions

Exynos 9825: All versions

Exynos 980: All versions

Exynos 990: All versions

Exynos 850: All versions

Exynos W920: All versions

CPE2.3 External links

http://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2024-44068/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.



###SIDEBAR###