Out-of-bounds Write Vulnerability in Samsung Exynos 1380 Mobile Processor
CVE-2025-23097

9.1CRITICAL

Key Information:

Vendor

Samsung
Status
Exynos 1380 Mobile Processor
Vendor
CVE Published:
3 June 2025

What is CVE-2025-23097?

A vulnerability exists in the Samsung Exynos 1380 Mobile Processor due to a deficiency in length checks, leading to potential out-of-bounds writes. This flaw may allow attackers to exploit the memory management, potentially compromising the integrity and confidentiality of the device. Users of devices utilizing the Exynos 1380 should be aware of this issue and seek out available patches or updates.

References

https://semiconductor.samsung.com/support/quality-support...
https://semiconductor.samsung.com/support/quality-support...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.