CVE-2025-52909
critical · 9.8An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 2 of 2.
9.8
CVSS
0.5%
EPSS (exploit prob.)
42nd
EPSS percentile
2026-04-07
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| samsung | exynos_w1000_firmware | all versions |
| samsung | exynos_w1000 | all versions |
| samsung | exynos_w920_firmware | all versions |
| samsung | exynos_w920 | all versions |
| samsung | exynos_w930_firmware | all versions |
| samsung | exynos_w930 | all versions |
| samsung | exynos_980_firmware | all versions |
| samsung | exynos_980 | all versions |
| samsung | exynos_850_firmware | all versions |
| samsung | exynos_850 | all versions |
| samsung | exynos_1580_firmware | all versions |
| samsung | exynos_1580 | all versions |
| samsung | exynos_1480_firmware | all versions |
| samsung | exynos_1480 | all versions |
| samsung | exynos_1380_firmware | all versions |
| samsung | exynos_1380 | all versions |
| samsung | exynos_1330_firmware | all versions |
| samsung | exynos_1330 | all versions |
| samsung | exynos_1280_firmware | all versions |
| samsung | exynos_1280 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2025-52909