CVE-2025-52908

CRITICAL

Samsung Exynos Wi-Fi Driver - Buffer Overflow

Title source: llm
STIX 2.1

Description

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 1 of 2.

Scores

CVSS v3 9.8
EPSS 0.0002
EPSS Percentile 5.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-120
Status published
Products (10)
samsung/exynos_1280_firmware
samsung/exynos_1330_firmware
samsung/exynos_1380_firmware
samsung/exynos_1480_firmware
samsung/exynos_1580_firmware
samsung/exynos_850_firmware
samsung/exynos_980_firmware
samsung/exynos_w1000_firmware
samsung/exynos_w920_firmware
samsung/exynos_w930_firmware
Published Apr 07, 2026
Tracked Since Apr 07, 2026