CVE-2025-23099

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-23099
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23099/ Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
History

13 Jun 2025, 18:04

Type Values Removed Values Added
CPE cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23099/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23099/ - Vendor Advisory
First Time Samsung exynos 2400
Samsung exynos 2400 Firmware
Samsung
Samsung exynos 1480
Samsung exynos 1480 Firmware

04 Jun 2025, 14:54

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en Samsung Mobile Processor Exynos 1480 y 2400. La falta de una verificación de longitud provoca escrituras fuera de los límites.

03 Jun 2025, 03:15

Type Values Removed Values Added
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

02 Jun 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-02 19:15

Updated : 2025-06-13 18:04

NVD link : CVE-2025-23099

Mitre link : CVE-2025-23099

CVE.ORG link : CVE-2025-23099

JSON object : View

Products Affected

samsung

  • exynos_1480_firmware
  • exynos_1480
  • exynos_2400
  • exynos_2400_firmware
CWE
CWE-787

Out-of-bounds Write