Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Samsung Exynos processors and modems have security flaw in packet processing

CVE-2025-32100 · published 1 year ago
Summary

Some Samsung mobile and wearable processors, and certain modems, have a security weakness that could allow an attacker to potentially crash the device or execute malicious code. This issue is present in certain Samsung Exynos processors and modems, including Exynos 980, 990, and others. Users should keep their devices and software up to date to ensure they receive any available security patches.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
samsung exynos_980_firmware All versions
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
samsung exynos_990_firmware All versions
cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*
samsung exynos_850_firmware All versions
cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*
samsung exynos_1080_firmware All versions
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
samsung exynos_2100_firmware All versions
cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*
samsung exynos_1280_firmware All versions
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
samsung exynos_2200_firmware All versions
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
samsung exynos_1330_firmware All versions
cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*
samsung exynos_1380_firmware All versions
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
samsung exynos_1480_firmware All versions
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
samsung exynos_2400_firmware All versions
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
samsung exynos_1580_firmware All versions
cpe:2.3:o:samsung:exynos_1580_firmware:-:*:*:*:*:*:*:*
samsung exynos_9110_firmware All versions
cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*
samsung exynos_w920_firmware All versions
cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*
samsung exynos_w930_firmware All versions
cpe:2.3:o:samsung:exynos_w930_firmware:-:*:*:*:*:*:*:*
samsung exynos_w1000_firmware All versions
cpe:2.3:o:samsung:exynos_w1000_firmware:-:*:*:*:*:*:*:*
samsung modem_5123_firmware All versions
cpe:2.3:o:samsung:modem_5123_firmware:-:*:*:*:*:*:*:*
samsung modem_5300_firmware All versions
cpe:2.3:o:samsung:modem_5300_firmware:-:*:*:*:*:*:*:*
samsung modem_5400_firmware All versions
cpe:2.3:o:samsung:modem_5400_firmware:-:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, M...
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via malformed ROHC packets.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published2 Sep 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-32100 · NVD
Track software like this
Free during beta