Search Results (247 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-54325 1 Samsung 25 Exynos, Exynos 1080, Exynos 1080 Firmware and 22 more 2025-11-07 5.3 Medium
An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000. A race condition in the VTS driver results in an out-of-bounds read, leading to an information leak.
CVE-2025-54332 1 Samsung 5 Exynos, Exynos 1380, Exynos 1380 Firmware and 2 more 2025-11-07 7.5 High
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is a NULL Pointer Dereference of profiler.node in the npu_vertex_profileoff function.
CVE-2025-54331 1 Samsung 5 Exynos, Exynos 1380, Exynos 1380 Firmware and 2 more 2025-11-07 5.3 Medium
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.
CVE-2025-54330 1 Samsung 5 Exynos, Exynos 1380, Exynos 1380 Firmware and 2 more 2025-11-07 5.3 Medium
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read of q->bufs[] in the __is_done_for_me function.
CVE-2025-54329 1 Samsung 36 Exynos 1280, Exynos 1280 Firmware, Exynos 1330 and 33 more 2025-11-07 7.5 High
An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message (including an SMS message) lacks bounds checking, which can lead to a heap overflow.
CVE-2025-54323 1 Samsung 27 Exynos, Exynos 1080, Exynos 1080 Firmware and 24 more 2025-11-07 7.5 High
An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580. Improper debug printing leads to information leakage.
CVE-2024-55568 2 Samsung, Samsung Mobile 44 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 41 more 2025-11-04 7.5 High
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The absence of a NULL check leads to a Denial of Service when an attacker sends malformed MM packets to the target.
CVE-2025-26781 1 Samsung 39 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 36 more 2025-11-04 7.5 High
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service.
CVE-2022-22265 2 Google, Samsung 2 Android, Exynos 2025-10-30 5 Medium
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25371 1 Samsung 4 Android, Exynos 2100, Exynos 980 and 1 more 2025-10-30 6.1 Medium
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
CVE-2021-25372 1 Samsung 4 Android, Exynos 2100, Exynos 980 and 1 more 2025-10-30 6.1 Medium
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
CVE-2025-48025 1 Samsung 21 Exynos, Exynos 1280, Exynos 1280 Firmware and 18 more 2025-10-28 4.3 Medium
In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an improper access control vulnerability related to a log file.
CVE-2025-26782 1 Samsung 41 Exynos, Exynos 1080, Exynos 1080 Firmware and 38 more 2025-10-28 7.5 High
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service.
CVE-2024-45183 1 Samsung 14 Exynos 1280, Exynos 1280 Firmware, Exynos 1330 and 11 more 2025-10-27 6.5 Medium
An issue was discovered in Samsung Mobile Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, and 2400. A lack of a JPEG length check leads to an out-of-bound write.
CVE-2025-26780 1 Samsung 4 Exynos 2400, Exynos 2400 Firmware, Modem 5400 and 1 more 2025-10-27 7.5 High
An issue was discovered in L2 in Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400. The lack of a length check leads to a Denial of Service via a malformed PDCP packet.
CVE-2025-47202 1 Samsung 38 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 35 more 2025-10-27 9.1 Critical
In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a length check leads to out-of-bounds writes.
CVE-2023-21467 1 Samsung 3 Exynos, Mobile, Samsung Mobile 2025-09-08 4.6 Medium
Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message.
CVE-2025-32100 1 Samsung 42 Exynos, Exynos 1080, Exynos 1080 Firmware and 39 more 2025-09-05 6.5 Medium
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via malformed ROHC packets.
CVE-2023-21472 1 Samsung 4 Android, Exynos, Mobile and 1 more 2025-09-05 6.8 Medium
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
CVE-2023-21473 1 Samsung 4 Android, Exynos, Mobile and 1 more 2025-09-05 6.8 Medium
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.