CVE-2025-23099

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

History

13 Jun 2025, 18:04

Type Values Removed Values Added
First Time Samsung exynos 1480
Samsung exynos 2400 Firmware
Samsung exynos 1480 Firmware
Samsung
Samsung exynos 2400
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23099/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23099/ - Vendor Advisory
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
CPE cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*

02 Jun 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-02 19:15

Updated : 2025-06-13 18:04


NVD link : CVE-2025-23099

Mitre link : CVE-2025-23099


JSON object : View

Products Affected

samsung

  • exynos_2400
  • exynos_2400_firmware
  • exynos_1480_firmware
  • exynos_1480
CWE

No CWE.