An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes via malformed NAS packets.
CVE-2025-27807
CVSS base score
9.1 (v3.1)
Severity
CRITICAL
Attack vector
Network
Weakness
CWE-787
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
samsung exynos 990 firmware
samsung exynos 980 firmware
samsung exynos 850 firmware
samsung exynos 1080 firmware
samsung exynos 2100 firmware
samsung exynos 1280 firmware
samsung exynos 2200 firmware
samsung exynos 1330 firmware
samsung exynos 1380 firmware
samsung exynos 1480 firmware
References
- semiconductor.samsung.com Vendor Advisory
- semiconductor.samsung.com Vendor Advisory