← All CVEs

CVE-2025-54328

critical · 10

An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.

10
CVSS
0.5%
EPSS (exploit prob.)
43rd
EPSS percentile
2026-04-06
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-121

Affected products

VendorProductAffected versions
samsungexynos_980_firmwareall versions
samsungexynos_980all versions
samsungexynos_990_firmwareall versions
samsungexynos_990all versions
samsungexynos_850_firmwareall versions
samsungexynos_850all versions
samsungexynos_1080_firmwareall versions
samsungexynos_1080all versions
samsungexynos_2100_firmwareall versions
samsungexynos_2100all versions
samsungexynos_1280_firmwareall versions
samsungexynos_1280all versions
samsungexynos_1330_firmwareall versions
samsungexynos_1330all versions
samsungexynos_1380_firmwareall versions
samsungexynos_1380all versions
samsungexynos_1480_firmwareall versions
samsungexynos_1480all versions
samsungexynos_1580_firmwareall versions
samsungexynos_1580all versions
samsungexynos_2200_firmwareall versions
samsungexynos_2200all versions
samsungexynos_2400_firmwareall versions
samsungexynos_2400all versions
samsungexynos_2500_firmwareall versions
samsungexynos_2500all versions
samsungexynos_9110_firmwareall versions
samsungexynos_9110all versions
samsungexynos_w930_firmwareall versions
samsungexynos_w930all versions
samsungexynos_w920_firmwareall versions
samsungexynos_w920all versions
samsungexynos_w1000_firmwareall versions
samsungexynos_w1000all versions
samsungexynos_modem_5123_firmwareall versions
samsungexynos_modem_5123all versions
samsungexynos_modem_5300_firmwareall versions
samsungexynos_modem_5300all versions
samsungexynos_modem_5400_firmwareall versions
samsungexynos_modem_5400all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-54328