CVE-2024-52923

HIGH
Published Mar 6, 2025 Modified Jul 1, 2025 CWE-119

Description

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Lack of a boundary check during the decoding of DL NAS Transport messages leads to a Denial of Service.

Is your site exposed to CVE-2024-52923?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-119 Buffer Overflow

Affected Products

Vendor Product
samsung exynos_9820_firmware
samsung exynos_9820
samsung exynos_9825_firmware
samsung exynos_9825
samsung exynos_980_firmware
samsung exynos_980
samsung exynos_990_firmware
samsung exynos_990
samsung exynos_850_firmware
samsung exynos_850
samsung exynos_1080_firmware
samsung exynos_1080
samsung exynos_2100_firmware
samsung exynos_2100
samsung exynos_1280_firmware
samsung exynos_1280
samsung exynos_2200_firmware
samsung exynos_2200
samsung exynos_1330_firmware
samsung exynos_1330
samsung exynos_1380_firmware
samsung exynos_1380
samsung exynos_1480_firmware
samsung exynos_1480
samsung exynos_2400_firmware
samsung exynos_2400
samsung exynos_9110_firmware
samsung exynos_9110
samsung exynos_w920_firmware
samsung exynos_w920
samsung exynos_w930_firmware
samsung exynos_w930
samsung exynos_w1000_firmware
samsung exynos_w1000
samsung exynos_modem_5123_firmware
samsung exynos_modem_5123
samsung exynos_modem_5300_firmware
samsung exynos_modem_5300
samsung exynos_modem_5400_firmware
samsung exynos_modem_5400

References

Frequently Asked Questions

What is CVE-2024-52923? +
An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Lack of a boundary check during the decoding of DL NAS Transport messages leads to a Denial of Service. It has a CVSS v3.1 base score of 7.5 (HIGH).
How severe is CVE-2024-52923? +
CVE-2024-52923 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-52923? +
CVE-2024-52923 affects products from samsung, specifically: exynos_1080, exynos_1080_firmware, exynos_1280, exynos_1280_firmware, exynos_1330, exynos_1330_firmware, exynos_1380, exynos_1380_firmware, exynos_1480, exynos_1480_firmware, exynos_2100, exynos_2100_firmware, exynos_2200, exynos_2200_firmware, exynos_2400, exynos_2400_firmware, exynos_850, exynos_850_firmware, exynos_9110, exynos_9110_firmware, exynos_980, exynos_980_firmware, exynos_9820, exynos_9820_firmware, exynos_9825, exynos_9825_firmware, exynos_990, exynos_990_firmware, exynos_modem_5123, exynos_modem_5123_firmware, exynos_modem_5300, exynos_modem_5300_firmware, exynos_modem_5400, exynos_modem_5400_firmware, exynos_w1000, exynos_w1000_firmware, exynos_w920, exynos_w920_firmware, exynos_w930, exynos_w930_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-52923? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-52923 — free, no signup required.