CVE-2024-27363

The vulnerability, identified as CVE-2024-27363, affects a range of Samsung Exynos mobile processors including Exynos 850, 9610, 980, 1280, 1380, 1330, W920, and W930 [1][2]. The root cause is the processor's failure to properly check a pointer address, which can lead to unintended information disclosure [2].

Exploitation of this vulnerability does not require authentication, as the improper pointer check can be triggered by an attacker with local access or through a malicious application. The exact attack vector is not detailed, but the flaw resides in the processor hardware/firmware, making it accessible from user-space [2].

An attacker exploiting this vulnerability could gain access to sensitive information stored in the processor's memory, potentially compromising confidentiality. The impact is classified as medium severity with a CVSS v3 base score of 6.0 [2].

Samsung has acknowledged the issue and recommends applying the latest security updates, which include patches for the affected processors. Users should refer to Samsung's product security update page for details [1][2].