PT-2025-23667 · Samsung · Exynos 1380

Billy Jheng Bing Jhong + 2 · Published 2025-06-03 · Updated 2025-06-06 · CVE-2025-23097

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1380 (affected versions not specified)

Description An issue was discovered in the Samsung Mobile Processor Exynos 1380, where the lack of a length check leads to out-of-bounds writes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-23097

Affected Products

Exynos 1380

References · 8

• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23097 · Security Note
• https://t.me/cvetracker/25316 · Telegram Post
• https://t.me/cvenotify/124646 · Telegram Post
• https://t.me/cvenotify/124955 · Telegram Post
• https://t.me/cvenotify/124530 · Telegram Post
• https://twitter.com/CVEnew/status/1929996107754680497 · Twitter Post