MEDIUM Published November 4, 2025

CVE-2025-27374

An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.

CVSS base score
5.3 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-787
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

samsung exynos 9825 firmware samsung exynos 9820 firmware samsung exynos 980 firmware samsung exynos 850 firmware samsung exynos 2400 firmware samsung exynos 1480 firmware samsung exynos 1380 firmware samsung exynos 1330 firmware samsung exynos 2200 firmware samsung exynos 1280 firmware

References

View full NVD advisory →

More samsung vulnerabilities

Published the same day

Related reading

← Back to CVE watch