CVE-2025-27891 Details
Description
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds reads via malformed NAS packets.
A vulnerability exists in several Samsung mobile and wearable processors, as well as certain modem chipsets, due to a lack of proper length checks. This oversight can lead to out-of-bounds read conditions when the processor receives malformed NAS packets, potentially allowing for unauthorized access to sensitive information or causing unintended behavior in the system.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 15, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| samsung exynos 980 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 980 | All versions |
CPE
Remediation
| |
| samsung exynos 990 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 990 | All versions |
CPE
Remediation
| |
| samsung exynos 850 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 850 | All versions |
CPE
Remediation
| |
| samsung exynos 1080 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 1080 | All versions |
CPE
Remediation
| |
| samsung exynos 2100 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 2100 | All versions |
CPE
Remediation
| |
| samsung exynos 1280 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 1280 | All versions |
CPE
Remediation
| |
| samsung exynos 2200 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 2200 | All versions |
CPE
Remediation
| |
| samsung exynos 1330 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 1330 | All versions |
CPE
Remediation
| |
| samsung exynos 1380 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 1380 | All versions |
CPE
Remediation
| |
| samsung exynos 1480 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 1480 | All versions |
CPE
Remediation
| |
| samsung exynos 2400 firmware | All versions |
CPE
Remediation
| |
| samsung exynos 2400 | All versions |
CPE
Remediation
| |
| samsung exynos w920 firmware | All versions |
CPE
Remediation
| |
| samsung exynos w920 | All versions |
CPE
Remediation
| |
| samsung exynos w930 firmware | All versions |
CPE
Remediation
| |
| samsung exynos w930 | All versions |
CPE
Remediation
| |
| samsung exynos w1000 firmware | All versions |
CPE
Remediation
| |
| samsung exynos w1000 | All versions |
CPE
Remediation
| |
| samsung exynos modem 5123 firmware | All versions |
CPE
Remediation
| |
| samsung exynos modem 5123 | All versions |
CPE
Remediation
| |
| samsung exynos modem 5300 firmware | All versions |
CPE
Remediation
| |
| samsung exynos modem 5300 | All versions |
CPE
Remediation
| |
| samsung exynos modem 5400 firmware | All versions |
CPE
Remediation
| |
| samsung exynos modem 5400 | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jul 1, 2025 | Initial Analysis | [email protected] |
| May 19, 2025 | CVE Modified | [email protected] |
| May 15, 2025 | CVE Modified | CISA-ADP |
| May 14, 2025 | New CVE Received | [email protected] |