PT-2025-23644 · Samsung · Exynos

Billy Jheng Bing Jhong + 2 · Publicado 2025-06-03 · Atualizado 2025-06-06 · CVE-2025-23107

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 1480 and 2400

Description An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes.

Recommendations For Samsung Mobile Processor Exynos version 1480, consider implementing a length check to prevent out-of-bounds writes until a patch is available. For Samsung Mobile Processor Exynos version 2400, consider implementing a length check to prevent out-of-bounds writes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2025-23107

Produtos afetados

Exynos

Referências · 8

• https://t.me/cvetracker/25296 · Publicação no Telegram
• https://twitter.com/starlabs_sg/status/1929905383960953078 · Publicação no Twitter
• https://t.me/cvenotify/124953 · Publicação no Telegram
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1929950140032336090 · Publicação no Twitter
• https://t.me/cvenotify/124510 · Publicação no Telegram
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23107 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-23107 · Nota de Segurança