Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

CVE-2025-62818: Samsung Exynos Processors Can Cause SMS Data Corruption

CVE-2025-62818 · published 7 months ago
Summary

A security issue in Samsung's Exynos processors can cause data corruption in SMS messages, potentially leading to loss of sensitive information. This issue affects a range of Samsung mobile and wearable processors, and users should be cautious when receiving or sending SMS messages. Samsung is likely to release a software update to address this issue.

Original advisory text
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5...
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. An out-of-bounds write occurs due to a mismatch between the TP-UDHI and UDL values when processing an SMS TP-UD packet.
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published7 Apr 2026
Updated4 Nov 2026
First seen7 Apr 2026
Sources
Track software like this
Free during beta