VULNERABILITY INTELLIGENCE
CVE-2025-27807
CVSS score9.1 CRITICAL
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-01-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Description
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes via malformed NAS packets.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-787
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory