← Back

CVE-2025-53966

nvd nist
Published: Jan 5, 2026Modified: Jan 9, 2026

JSON object

Loading...
8.4
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.5 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message.

Affected (4)

Samsung
4 products
Exynos 1380 Firmware
Exynos 1480 Firmware
Exynos 1580 Firmware
Exynos 2400 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exynos 1380 Firmware
All versions
Running on/withPlatform Versions
Samsung
Exynos 1380
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exynos 1480 Firmware
All versions
Running on/withPlatform Versions
Samsung
Exynos 1480
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exynos 1580 Firmware
All versions
Running on/withPlatform Versions
Samsung
Exynos 1580
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exynos 2400 Firmware
All versions
Running on/withPlatform Versions
Samsung
Exynos 2400
All versions

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory

Timeline

No history available yet.