CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2025-54328

CVSS 10.0v3.1pub. 2026-04-06upd. 2026-07-24

An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.

🤖 AI Analysis
How it works

The error classified as CWE-121 (Stack-based Buffer Overflow) occurs in the code responsible for parsing SMS messages in RP-DATA format. When processing a specially crafted SMS message, data exceeds the bounds of the stack buffer, which may overwrite critical control structures. The attack vector is network-based (AV:N), requires no privileges (PR:N) or user action (UI:N), and the scope of the attack extends beyond the initially compromised component (S:C).

Impact

Successful exploitation of this vulnerability may enable an attacker to remotely execute arbitrary code (RCE) on the victim's device with potential complete compromise of system confidentiality, integrity, and availability. The attack can be conducted solely by sending a specially crafted SMS message, without any user interaction.

Mitigation & patch

Apply patches available from the manufacturer according to the references. Detailed information about updates is available on the Samsung Semiconductor Product Security Updates page: https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54328/

Who is affected

Samsung Exynos processor firmware: 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000 and Exynos Modem 5123, Modem 5300 and Modem 5400 modems — used in Samsung mobile devices, wearable devices and modems.

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Samsung Exynos 1080

    HW
    Samsung
    all versions

  • Samsung Exynos 1080 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1280

    HW
    Samsung
    all versions

  • Samsung Exynos 1280 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1330

    HW
    Samsung
    all versions

  • Samsung Exynos 1330 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1380

    HW
    Samsung
    all versions

  • Samsung Exynos 1380 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1480

    HW
    Samsung
    all versions

  • Samsung Exynos 1480 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1580

    HW
    Samsung
    all versions

  • Samsung Exynos 1580 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2100

    HW
    Samsung
    all versions

  • Samsung Exynos 2100 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2200

    HW
    Samsung
    all versions

  • Samsung Exynos 2200 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2400

    HW
    Samsung
    all versions

  • Samsung Exynos 2400 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2500

    HW
    Samsung
    all versions

  • Samsung Exynos 2500 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 850

    HW
    Samsung
    all versions

  • Samsung Exynos 850 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 9110

    HW
    Samsung
    all versions

  • Samsung Exynos 9110 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 980

    HW
    Samsung
    all versions

  • Samsung Exynos 980 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 990

    HW
    Samsung
    all versions

  • Samsung Exynos 990 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos Modem 5123

    HW
    Samsung
    all versions

  • Samsung Exynos Modem 5123 Firmware

    OS
    Samsung
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2025-62818CRITICAL9.8PL ✓same product

Out-of-bounds write w procesorach Samsung Exynos przy przetwarzaniu SMS TP-UD

CVE-2025-52908CRITICAL9.8PL ✓same product

Buffer overflow w sterowniku Wi-Fi Samsung Exynos przez błędną obsługę NL80211

CVE-2025-52909CRITICAL9.8PL ✓same product

Buffer overflow w sterowniku Wi-Fi Samsung Exynos przez NL80211

CVE-2025-58349CRITICAL9.1PL ✓same product

Błąd obsługi pakietów LTE MAC w procesorach Samsung Exynos powoduje crash baseband

CVE-2025-27807CRITICAL9.1PL ✓same product

Out-of-bounds write w Samsung Exynos via błędne pakiety NAS