CVE-2025-23102

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-23102
An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads to privilege escalation.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23102/ Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
History

10 Jun 2025, 20:07

Type Values Removed Values Added
First Time Samsung exynos 1080
Samsung exynos 1280 Firmware
Samsung exynos 1480 Firmware
Samsung
Samsung exynos 990 Firmware
Samsung exynos 980
Samsung exynos 1280
Samsung exynos 2200
Samsung exynos 980 Firmware
Samsung exynos 2400
Samsung exynos 2100
Samsung exynos 1080 Firmware
Samsung exynos 990
Samsung exynos 2400 Firmware
Samsung exynos 2100 Firmware
Samsung exynos 2200 Firmware
Samsung exynos 1380 Firmware
Samsung exynos 1480
Samsung exynos 1380
CPE cpe:2.3:h:*:exynos_990:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_9820_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_9820:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_9825_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_9825:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_2100:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_2200:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1080:-:*:*:*:*:*:*:*		 cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*

09 Jun 2025, 14:15

Type Values Removed Values Added
Summary (en) An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, and 1380. A Double Free in the mobile processor leads to privilege escalation. (en) An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads to privilege escalation.

06 Jun 2025, 18:49

Type Values Removed Values Added
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23102/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23102/ - Vendor Advisory
First Time * exynos 980 Firmware
* exynos 2200 Firmware
* exynos 1280 Firmware
* exynos 9820 Firmware
* exynos 9825 Firmware
* exynos 1280
* exynos 2100 Firmware
* exynos 1380
* exynos 1080 Firmware
*
* exynos 990
* exynos 990 Firmware
* exynos 9825
* exynos 2200
* exynos 1080
* exynos 980
* exynos 2100
* exynos 1380 Firmware
* exynos 9820
CPE cpe:2.3:o:*:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_9825_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_2100:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_990:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_9820_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_9820:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_9825:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_2200:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1080:-:*:*:*:*:*:*:*

04 Jun 2025, 14:54

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200 y 1380. Una doble liberación en el procesador móvil conduce a una escalada de privilegios.

03 Jun 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-03 19:15

Updated : 2025-06-10 20:07

NVD link : CVE-2025-23102

Mitre link : CVE-2025-23102

CVE.ORG link : CVE-2025-23102

JSON object : View

Products Affected

samsung

  • exynos_990_firmware
  • exynos_1280
  • exynos_2400_firmware
  • exynos_2100
  • exynos_990
  • exynos_2200
  • exynos_1080
  • exynos_2100_firmware
  • exynos_1280_firmware
  • exynos_1380
  • exynos_1480
  • exynos_1380_firmware
  • exynos_1080_firmware
  • exynos_2400
  • exynos_2200_firmware
  • exynos_1480_firmware
  • exynos_980_firmware
  • exynos_980
CWE
CWE-415

Double Free