PT-2025-23644 · Samsung · Exynos

Billy Jheng Bing Jhong + 2 · Published 2025-06-03 · Updated 2025-06-06 · CVE-2025-23107

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 1480 and 2400

Description An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes.

Recommendations For Samsung Mobile Processor Exynos version 1480, consider implementing a length check to prevent out-of-bounds writes until a patch is available. For Samsung Mobile Processor Exynos version 2400, consider implementing a length check to prevent out-of-bounds writes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-23107

Affected Products

Exynos

References · 8

• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23107 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23107 · Security Note
• https://t.me/cvetracker/25296 · Telegram Post
• https://twitter.com/starlabs_sg/status/1929905383960953078 · Twitter Post
• https://t.me/cvenotify/124953 · Telegram Post
• https://twitter.com/CVEnew/status/1929950140032336090 · Twitter Post
• https://t.me/cvenotify/124510 · Telegram Post