Vulnerabilidades do Samsung Exynos 2500 Firmware

CVE-2025-62818 Crítica · 9.8 CWE-787 07/04/2026

Out-of-bounds Write em Samsung Exynos 990 Firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. An out-of-bounds write occurs due to a mismatch between the TP-UDHI and UDL values when processing an SMS TP-UD packet.

CVE-2025-57834 Alta · 7.5 CWE-20 06/04/2026

Improper Input Validation em Samsung Exynos 980 Firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400, and Modem 5410). The absence of proper input validation leads to a Denial of Service.

CVE-2025-54328 Crítica · 10.0 CWE-121 06/04/2026

Stack-based Buffer Overflow em Samsung Exynos 980 Firmware

An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.

CVE-2025-58349 Crítica · 9.1 CWE-400 06/04/2026

Uncontrolled Resource Consumption em Samsung Exynos 990 Firmware

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to baseband crashes.

CVE-2025-54324 Alta · 7.5 CWE-400 06/04/2026

Uncontrolled Resource Consumption em Samsung Exynos 990 Firmware

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect Handling of a DL NAS Transport packet leads to a Denial of Service.

CVE-2025-59440 Alta · 7.5 CWE-400 06/04/2026

Uncontrolled Resource Consumption em Samsung Exynos 990 Firmware

An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.

CVE-2025-57835 Alta · 7.5 CWE-20 06/04/2026

Improper Input Validation em Samsung Exynos 990 Firmware

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory access, causing a system crash via a malformed RRCReconfiguration message.

CVE-2025-62817 Alta · 7.5 CWE-476 03/03/2026

NULL Pointer Dereference em Samsung Exynos 1280 Firmware

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_hdr_buf in __pilot_parsing_ncp() causes a denial of service.

CVE-2025-62816 Média · 5.5 CWE-20 03/03/2026

Improper Input Validation em Samsung Exynos 1280 Firmware

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. Unvalidated VS4L_VERTEXIOC_BOOTUP input leads to a denial of service.

CVE-2025-62815 Média · 5.5 CWE-476 03/03/2026

NULL Pointer Dereference em Samsung Exynos 1380 Firmware

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of npu_proto_drv.ast.thread_ref in set_cpu_affinity() causes a denial of service.

CVE-2025-52517 Média · 5.9 CWE-362 05/01/2026

Race Condition em Samsung Exynos 2500 Firmware

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race condition in the issimian device driver results in a double free, leading to a denial of service.

CVE-2025-52516 Média · 6.2 CWE-822 05/01/2026

Untrusted Pointer Dereference em Samsung Exynos 1330 Firmware

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service.

CVE-2025-52515 Média · 5.1 CWE-362 05/01/2026

Race Condition em Samsung Exynos 1330 Firmware

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race condition in the issimian device driver results in an out-of-bounds access, leading to a denial of service.

CVE-2025-52519 Alta · 7.1 CWE-20 05/01/2026

Improper Input Validation em Samsung Exynos 1330 Firmware

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Improper validation of user-space input in the issimian device driver leads to information disclosure and a denial of service.

CVE-2025-53965 Média · 5.3 CWE-119 03/12/2025

Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Samsung Exynos 1280 Firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to decode the SOR transparent container lacks bounds checking, which can cause a fatal error.

CVE-2025-54335 Média · 6.5 CWE-416 04/11/2025

Use After Free em Samsung Exynos 1480 Firmware

An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver.

CVE-2025-54334 Alta · 7.5 CWE-476 04/11/2025

NULL Pointer Dereference em Samsung Exynos 1280 Firmware

An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.

CVE-2025-52513 Alta · 7.5 CWE-787 04/11/2025

Out-of-bounds Write em Samsung Exynos 1580 Firmware

An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in an out-of-bounds write, leading to a denial of service.

CVE-2025-52512 Alta · 7.5 CWE-125 04/11/2025

Out-of-bounds Read em Samsung Exynos 1580 Firmware

An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in out-of-bounds memory access, leading to a denial of service.

CVE-2025-54325 Média · 5.3 CWE-125 04/11/2025

Out-of-bounds Read em Samsung Exynos 1080 Firmware

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000. A race condition in the VTS driver results in an out-of-bounds read, leading to an information leak.

CVE-2025-54329 Alta · 7.5 CWE-122 04/11/2025

Heap-based Buffer Overflow em Samsung Exynos 1280 Firmware

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message (including an SMS message) lacks bounds checking, which can lead to a heap overflow.