CRITICAL Published April 7, 2026

CVE-2025-52909

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 2 of 2.

CVSS base score
9.8 (v3.1)
Severity
CRITICAL
Attack vector
Network
Weakness
CWE-120
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

samsung exynos w1000 firmware samsung exynos w920 firmware samsung exynos w930 firmware samsung exynos 980 firmware samsung exynos 850 firmware samsung exynos 1580 firmware samsung exynos 1480 firmware samsung exynos 1380 firmware samsung exynos 1330 firmware samsung exynos 1280 firmware

References

View full NVD advisory →

More samsung vulnerabilities

Published the same day

Related reading

← Back to CVE watch