PT-2025-21234 · Samsung · Exynos

Published 2025-05-14 · Updated 2025-05-14 · CVE-2025-26783

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 2100, 1280, 2200, 1330, 1380, 1480, 2400, W1000, Modem 5300, and Modem 5400

Description: An issue was discovered in the RRC of Samsung processors, leading to a Denial of Service due to incorrect handling of undefined values.

Recommendations: For Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 2100, 1280, 2200, 1330, 1380, 1480, 2400, W1000, Modem 5300, and Modem 5400, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-26783

Affected Products

Exynos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-26783 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-26783 · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://twitter.com/CVEnew/status/1922765623828021647 · Twitter Post
• https://t.me/cvetracker/23863 · Telegram Post