Samsung Exynos 2500 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Samsung Exynos 2500 Firmware: 21 record(s), with affected versions and fixes.cpe:2.3:o:samsung:exynos_2500_firmware
CVE-2025-62818
Critical · 9.8
CWE-787 Apr 7, 2026
Out-of-bounds Write in Samsung Exynos 990 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. An out-of-bounds write occurs due to a mismatch between the TP-UDHI and UDL values when processing an SMS TP-UD packet.
CVE-2025-57834
High · 7.5
CWE-20 Apr 6, 2026
Improper Input Validation in Samsung Exynos 980 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400, and Modem 5410). The absence of proper input validation leads to a Denial of Service.
CVE-2025-54328
Critical · 10.0
CWE-121 Apr 6, 2026
Stack-based Buffer Overflow in Samsung Exynos 980 Firmware
An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.
CVE-2025-58349
Critical · 9.1
CWE-400 Apr 6, 2026
Uncontrolled Resource Consumption in Samsung Exynos 990 Firmware
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to baseband crashes.
CVE-2025-54324
High · 7.5
CWE-400 Apr 6, 2026
Uncontrolled Resource Consumption in Samsung Exynos 990 Firmware
An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect Handling of a DL NAS Transport packet leads to a Denial of Service.
CVE-2025-59440
High · 7.5
CWE-400 Apr 6, 2026
Uncontrolled Resource Consumption in Samsung Exynos 990 Firmware
An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.
CVE-2025-57835
High · 7.5
CWE-20 Apr 6, 2026
Improper Input Validation in Samsung Exynos 990 Firmware
An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory access, causing a system crash via a malformed RRCReconfiguration message.
CVE-2025-62817
High · 7.5
CWE-476 Mar 3, 2026
NULL Pointer Dereference in Samsung Exynos 1280 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_hdr_buf in __pilot_parsing_ncp() causes a denial of service.
CVE-2025-62816
Medium · 5.5
CWE-20 Mar 3, 2026
Improper Input Validation in Samsung Exynos 1280 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. Unvalidated VS4L_VERTEXIOC_BOOTUP input leads to a denial of service.
CVE-2025-62815
Medium · 5.5
CWE-476 Mar 3, 2026
NULL Pointer Dereference in Samsung Exynos 1380 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of npu_proto_drv.ast.thread_ref in set_cpu_affinity() causes a denial of service.
CVE-2025-52517
Medium · 5.9
CWE-362 Jan 5, 2026
Race Condition in Samsung Exynos 2500 Firmware
An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race condition in the issimian device driver results in a double free, leading to a denial of service.
CVE-2025-52516
Medium · 6.2
CWE-822 Jan 5, 2026
An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos...
An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service.
CVE-2025-52515
Medium · 5.1
CWE-362 Jan 5, 2026
Race Condition in Samsung Exynos 1330 Firmware
An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race condition in the issimian device driver results in an out-of-bounds access, leading to a denial of service.
CVE-2025-52519
High · 7.1
CWE-20 Jan 5, 2026
Improper Input Validation in Samsung Exynos 1330 Firmware
An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Improper validation of user-space input in the issimian device driver leads to information disclosure and a denial of service.
CVE-2025-53965
Medium · 5.3
CWE-119 Dec 3, 2025
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Samsung Exynos 1280 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to decode the SOR transparent container lacks bounds checking, which can cause a fatal error.
CVE-2025-54335
Medium · 6.5
CWE-416 Nov 4, 2025
Use After Free in Samsung Exynos 1480 Firmware
An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver.
CVE-2025-54334
High · 7.5
CWE-476 Nov 4, 2025
NULL Pointer Dereference in Samsung Exynos 1280 Firmware
An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.
CVE-2025-52513
High · 7.5
CWE-787 Nov 4, 2025
Out-of-bounds Write in Samsung Exynos 1580 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in an out-of-bounds write, leading to a denial of service.
CVE-2025-52512
High · 7.5
CWE-125 Nov 4, 2025
Out-of-bounds Read in Samsung Exynos 1580 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in out-of-bounds memory access, leading to a denial of service.
CVE-2025-54325
Medium · 5.3
CWE-125 Nov 4, 2025
Out-of-bounds Read in Samsung Exynos 1080 Firmware
An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000. A race condition in the VTS driver results in an out-of-bounds read, leading to an information leak.
CVE-2025-54329
High · 7.5
CWE-122 Nov 4, 2025
Heap-based Buffer Overflow in Samsung Exynos 1280 Firmware
An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message (including an SMS message) lacks bounds checking, which can lead to a heap overflow.