PT-2025-45040 · Samsung+1 · Exynos 1380+10

Published 2025-05-20 · Updated 2025-11-07 · CVE-2025-49494

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor versions prior to the fix Samsung Wearable Processor versions prior to the fix Samsung Modem versions prior to the fix Exynos 2100 versions prior to the fix Exynos 1280 versions prior to the fix Exynos 2200 versions prior to the fix Exynos 1330 versions prior to the fix Exynos 1380 versions prior to the fix Exynos 1480 versions prior to the fix Exynos 9110 versions prior to the fix Modem 5123 versions prior to the fix

Description A flaw exists in Samsung Mobile Processor, Wearable Processor, and Modem Exynos processors. Specifically, improper handling of a 5G NRMM packet can result in a Denial of Service. A 5G NRMM (New Radio Measurement Report) packet is used for reporting radio measurements in 5G networks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-16042

CVE-2025-49494

Affected Products

Exynos 1280

Exynos 1330

Exynos 1380

Exynos 1480

Exynos 2100

Exynos 2200

Exynos 9110

Modem 5123

Samsung Mobile Processor

Samsung Modem

Samsung Wearable Processor

References · 5

• https://bdu.fstec.ru/vul/2025-16042 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-49494 · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49494 · Security Note
• https://t.me/cveNotify/142085 · Telegram Post