PT-2026-1324 · Samsung · Exynos 1380+3

Published 2026-01-05 · Updated 2026-01-29 · CVE-2025-53966

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1380 Samsung Mobile Processor Exynos 1480 Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 1580

Description An improper handling of the NL80211 vendor command results in a buffer overflow when processing an IOCTL message. The NL80211 command is a standard interface for wireless networking in Linux, and an IOCTL message is a system call used to control device drivers. A buffer overflow occurs when a program attempts to write data beyond the allocated memory boundary, potentially leading to system crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-53966

Affected Products

Exynos 1380

Exynos 1480

Exynos 1580

Exynos 2400

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-53966 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-53966 · Vendor Advisory
• https://twitter.com/CVEnew/status/2008251294176432461 · Twitter Post
• https://reddit.com/r/GalaxyS21/comments/1qqh2tt/s21_firmware_security_update_downloaded_in_usa · Reddit Post
• https://t.me/cveNotify/148224 · Telegram Post
• https://t.me/CVEtracker/41414 · Telegram Post