PT-2025-28201 · Samsung · Exynos

Published 2025-07-07 · Updated 2025-07-13 · CVE-2025-47202

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 850 through 990, 1080, 1280, 1330, 1380, 1480, 1580, 2100, 2200, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400

Description: The issue is related to a lack of a length check in the RRC, which leads to out-of-bounds writes. This affects various Samsung Mobile Processor, Wearable Processor, and Modem Exynos models.

Recommendations: For all affected versions, consider implementing a length check in the RRC to prevent out-of-bounds writes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-47202

Affected Products

Exynos

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-47202 · Security Note
• https://twitter.com/VulmonFeeds/status/1942360821402657240 · Twitter Post
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-47202 · Note
• https://twitter.com/EduTax_Tuber/status/1944467034865279267 · Twitter Post
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Note
• https://twitter.com/CVEnew/status/1942257377723715601 · Twitter Post