PT-2025-28201 · Samsung · Exynos

CVE-2025-47202 · Publicado 2025-07-07 · Atualizado 2025-07-13

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 850 through 990, 1080, 1280, 1330, 1380, 1480, 1580, 2100, 2200, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400

Description: The issue is related to a lack of a length check in the RRC, which leads to out-of-bounds writes. This affects various Samsung Mobile Processor, Wearable Processor, and Modem Exynos models.

Recommendations: For all affected versions, consider implementing a length check in the RRC to prevent out-of-bounds writes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2025-47202

Produtos afetados

Exynos

Referências · 6

• https://twitter.com/VulmonFeeds/status/1942360821402657240 · Publicação no Twitter
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-47202 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-47202 · Nota de Segurança
• https://twitter.com/EduTax_Tuber/status/1944467034865279267 · Publicação no Twitter
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Nota
• https://twitter.com/CVEnew/status/1942257377723715601 · Publicação no Twitter