Out-of-Bounds Read Vulnerability in Samsung Exynos Mobile and Wearable Processors

CVE-2025-27891

What is CVE-2025-27891?

A vulnerability has been identified in multiple Samsung Exynos processors and modems, specifically related to the processing of malformed NAS packets. The absence of a proper length check can trigger out-of-bounds read conditions, potentially leading to the disclosure of sensitive information or unexpected behavior in affected products. This issue impacts a wide range of Exynos models and is crucial for users and developers to address to ensure the security of their devices.

References