CVE-2025-27374

MEDIUM

Samsung Mobile/Wearable Processor - Buffer Overflow

Title source: llm

Description

An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.

References (2)

Core 2

Core References

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-27374/

Scores

CVSS v3 5.3

EPSS 0.0006

EPSS Percentile 19.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-787

Status published

Products (11)

samsung/exynos_1080_firmware

samsung/exynos_1280_firmware

samsung/exynos_1330_firmware

samsung/exynos_1380_firmware

samsung/exynos_1480_firmware

samsung/exynos_2200_firmware

samsung/exynos_2400_firmware

samsung/exynos_850_firmware

samsung/exynos_980_firmware

samsung/exynos_9820_firmware

... and 1 more

Published Nov 04, 2025

Tracked Since Feb 18, 2026