← Database

CVE-2025-27891

CRITICAL CVSS: 9.1 Published: 2025-05-14 Modified: 2026-06-17

Description

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds reads via malformed NAS packets.

Affected Platforms

Samsung Exynos 980 FirmwareSamsung Exynos 2400 FirmwareSamsung Exynos W1000Samsung Exynos Modem 5123 FirmwareSamsung Exynos W930 FirmwareSamsung Exynos Modem 5123Samsung Exynos 2100Samsung Exynos 1080 FirmwareSamsung Exynos 2400Samsung Exynos Modem 5300

Weakness Type

CWE-125

References