critical9.1
CVE-2025-27891
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, …
Impact
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds reads via malformed NAS packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Exynos 980 Firmware | All versions |
| Samsung | Exynos 990 Firmware | All versions |
| Samsung | Exynos 850 Firmware | All versions |
| Samsung | Exynos 1080 Firmware | All versions |
| Samsung | Exynos 2100 Firmware | All versions |
| Samsung | Exynos 1280 Firmware | All versions |
| Samsung | Exynos 2200 Firmware | All versions |
| Samsung | Exynos 1330 Firmware | All versions |
| Samsung | Exynos 1380 Firmware | All versions |
| Samsung | Exynos 1480 Firmware | All versions |
| Samsung | Exynos 2400 Firmware | All versions |
| Samsung | Exynos W920 Firmware | All versions |