Evil-DB LogoEvil-DB
← All CVEs

CVE-2025-27807

critical · 9.1

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes via malformed NAS packets.

9.1
CVSS
0.4%
EPSS (exploit prob.)
30th
EPSS percentile
2026-01-05
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-787

Affected products

VendorProductAffected versions
samsungexynos_990_firmwareall versions
samsungexynos_990all versions
samsungexynos_980_firmwareall versions
samsungexynos_980all versions
samsungexynos_850_firmwareall versions
samsungexynos_850all versions
samsungexynos_1080_firmwareall versions
samsungexynos_1080all versions
samsungexynos_2100_firmwareall versions
samsungexynos_2100all versions
samsungexynos_1280_firmwareall versions
samsungexynos_1280all versions
samsungexynos_2200_firmwareall versions
samsungexynos_2200all versions
samsungexynos_1330_firmwareall versions
samsungexynos_1330all versions
samsungexynos_1380_firmwareall versions
samsungexynos_1380all versions
samsungexynos_1480_firmwareall versions
samsungexynos_1480all versions
samsungexynos_1580_firmwareall versions
samsungexynos_1580all versions
samsungexynos_2400_firmwareall versions
samsungexynos_2400all versions
samsungexynos_9110_firmwareall versions
samsungexynos_9110all versions
samsungexynos_w930_firmwareall versions
samsungexynos_w930all versions
samsungexynos_w920_firmwareall versions
samsungexynos_w920all versions
samsungexynos_w1000_firmwareall versions
samsungexynos_w1000all versions
samsungmodem_5123_firmwareall versions
samsungmodem_5123all versions
samsungmodem_5300_firmwareall versions
samsungmodem_5300all versions
samsungmodem_5400_firmwareall versions
samsungmodem_5400all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-27807