← All CVEs

CVE-2025-62818

critical · 9.8

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. An out-of-bounds write occurs due to a mismatch between the TP-UDHI and UDL values when processing an SMS TP-UD packet.

9.8
CVSS
0.5%
EPSS (exploit prob.)
39th
EPSS percentile
2026-04-07
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

VendorProductAffected versions
samsungexynos_990_firmwareall versions
samsungexynos_990all versions
samsungexynos_980_firmwareall versions
samsungexynos_980all versions
samsungexynos_850_firmwareall versions
samsungexynos_850all versions
samsungexynos_1080_firmwareall versions
samsungexynos_1080all versions
samsungexynos_1280_firmwareall versions
samsungexynos_1280all versions
samsungexynos_1330_firmwareall versions
samsungexynos_1330all versions
samsungexynos_1380_firmwareall versions
samsungexynos_1380all versions
samsungexynos_1480_firmwareall versions
samsungexynos_1480all versions
samsungexynos_1580_firmwareall versions
samsungexynos_1580all versions
samsungexynos_9110_firmwareall versions
samsungexynos_9110all versions
samsungexynos_2100_firmwareall versions
samsungexynos_2100all versions
samsungexynos_2200_firmwareall versions
samsungexynos_2200all versions
samsungexynos_2400_firmwareall versions
samsungexynos_2400all versions
samsungexynos_2500_firmwareall versions
samsungexynos_2500all versions
samsungexynos_w930_firmwareall versions
samsungexynos_w930all versions
samsungexynos_w920_firmwareall versions
samsungexynos_w920all versions
samsungexynos_w1000_firmwareall versions
samsungexynos_w1000all versions
samsungexynos_modem_5400_firmwareall versions
samsungexynos_modem_5400all versions
samsungexynos_modem_5300_firmwareall versions
samsungexynos_modem_5300all versions
samsungexynos_modem_5123_firmwareall versions
samsungexynos_modem_5123all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-62818