CVE-2025-27891

critical · 9.1

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds reads via malformed NAS packets.

9.1

CVSS

0.5%

EPSS (exploit prob.)

39th

EPSS percentile

2025-05-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-125

Affected products

Vendor	Product	Affected versions
samsung	exynos_980_firmware	all versions
samsung	exynos_980	all versions
samsung	exynos_990_firmware	all versions
samsung	exynos_990	all versions
samsung	exynos_850_firmware	all versions
samsung	exynos_850	all versions
samsung	exynos_1080_firmware	all versions
samsung	exynos_1080	all versions
samsung	exynos_2100_firmware	all versions
samsung	exynos_2100	all versions
samsung	exynos_1280_firmware	all versions
samsung	exynos_1280	all versions
samsung	exynos_2200_firmware	all versions
samsung	exynos_2200	all versions
samsung	exynos_1330_firmware	all versions
samsung	exynos_1330	all versions
samsung	exynos_1380_firmware	all versions
samsung	exynos_1380	all versions
samsung	exynos_1480_firmware	all versions
samsung	exynos_1480	all versions
samsung	exynos_2400_firmware	all versions
samsung	exynos_2400	all versions
samsung	exynos_w920_firmware	all versions
samsung	exynos_w920	all versions
samsung	exynos_w930_firmware	all versions
samsung	exynos_w930	all versions
samsung	exynos_w1000_firmware	all versions
samsung	exynos_w1000	all versions
samsung	exynos_modem_5123_firmware	all versions
samsung	exynos_modem_5123	all versions
samsung	exynos_modem_5300_firmware	all versions
samsung	exynos_modem_5300	all versions
samsung	exynos_modem_5400_firmware	all versions
samsung	exynos_modem_5400	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-27891