CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2025-62818

CVSS 9.8v3.1pub. 2026-04-07upd. 2026-04-13

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. An out-of-bounds write occurs due to a mismatch between the TP-UDHI and UDL values when processing an SMS TP-UD packet.

🤖 AI Analysis
How it works

The vulnerability occurs during the processing of SMS TP-UD (User Data) packets. There is a mismatch between the values of the TP-UDHI (User Data Header Indicator) and UDL (User Data Length) fields, leading to a write outside the allocated buffer boundaries (out-of-bounds write). An attacker can send a specially crafted SMS message that triggers this error without any user interaction or prior authentication.

Impact

An attacker can gain full control over the vulnerable device, including the ability to read and modify data and disrupt system operation (loss of confidentiality, integrity, and availability). Due to the network vector and lack of prerequisites, the vulnerability can be exploited for remote code execution (RCE).

Mitigation & patch

Patches available from the manufacturer should be applied according to references — security updates published by Samsung Semiconductor at https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-62818/

Who is affected

Samsung Mobile Processor, Wearable Processor and Modem: Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Samsung Exynos 1080

    HW
    Samsung
    all versions

  • Samsung Exynos 1080 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1280

    HW
    Samsung
    all versions

  • Samsung Exynos 1280 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1330

    HW
    Samsung
    all versions

  • Samsung Exynos 1330 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1380

    HW
    Samsung
    all versions

  • Samsung Exynos 1380 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1480

    HW
    Samsung
    all versions

  • Samsung Exynos 1480 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 1580

    HW
    Samsung
    all versions

  • Samsung Exynos 1580 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2100

    HW
    Samsung
    all versions

  • Samsung Exynos 2100 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2200

    HW
    Samsung
    all versions

  • Samsung Exynos 2200 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2400

    HW
    Samsung
    all versions

  • Samsung Exynos 2400 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 2500

    HW
    Samsung
    all versions

  • Samsung Exynos 2500 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 850

    HW
    Samsung
    all versions

  • Samsung Exynos 850 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 9110

    HW
    Samsung
    all versions

  • Samsung Exynos 9110 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 980

    HW
    Samsung
    all versions

  • Samsung Exynos 980 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos 990

    HW
    Samsung
    all versions

  • Samsung Exynos 990 Firmware

    OS
    Samsung
    all versions

  • Samsung Exynos Modem 5123

    HW
    Samsung
    all versions

  • Samsung Exynos Modem 5123 Firmware

    OS
    Samsung
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2025-52908CRITICAL9.8PL ✓same product

Buffer overflow w sterowniku Wi-Fi Samsung Exynos przez błędną obsługę NL80211

CVE-2025-52909CRITICAL9.8PL ✓same product

Buffer overflow w sterowniku Wi-Fi Samsung Exynos przez NL80211

CVE-2025-54328CRITICAL10.0PL ✓same product

Stack-based Buffer Overflow w obsłudze SMS w procesorach Samsung Exynos

CVE-2025-58349CRITICAL9.1PL ✓same product

Błąd obsługi pakietów LTE MAC w procesorach Samsung Exynos powoduje crash baseband

CVE-2025-27807CRITICAL9.1PL ✓same product

Out-of-bounds write w Samsung Exynos via błędne pakiety NAS