How severe is CVE-2024-25074?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.9 out of 10.

What type of vulnerability is CVE-2024-25074?

This is classified as CWE-763, which is a common weakness in software security.

CVE-2024-25074 - MEDIUM Severity | CVSS 5.9

Vulnerability Description

An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check a pointer specified by the SM (Session Management module), which can lead to Denial of Service (Untrusted Pointer Dereference).

Related Vulnerabilities

CVE-2019-20170

MEDIUM

CVSS:5.5(Medium)

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c.

CWE-7632019

CVE-2019-20631

MEDIUM

CVSS:5.5(Medium)

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_list_count in utils/list.c that can cause a denial of service via...

CWE-7632019

CVE-2019-20632

MEDIUM

CVSS:5.5(Medium)

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_odf_delete_descriptor in odf/desc_private.c that can cause a deni...

CWE-7632019

CVE-2020-28941

MEDIUM

CVSS:5.5(Medium)

An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack,...

CWE-7632020

CVE-2020-8715

MEDIUM

CVSS:5.5(Medium)

Invalid pointer for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable denial of service via local access.

CWE-7632020

CVE-2021-45261

MEDIUM

CVSS:5.5(Medium)

An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.

CWE-7632021