Buffer Overflow Vulnerability in Samsung Mobile and Wearable Processors
CVE-2025-52909

9.8CRITICAL

Key Information:

Vendor

Samsung
Status
Mobile Processor and Wearable Processor
Vendor
CVE Published:
7 April 2026

What is CVE-2025-52909?

A vulnerability in the Wi-Fi driver of Samsung's Exynos processors allows for a buffer overflow through improper handling of the NL80211 vendor command. This issue affects several models, including Exynos 980, 850, 1280, and others, posing a potential risk to devices using these processors. Exploitation may lead to unauthorized access or disruption of the device's functions.

References

https://semiconductor.samsung.com/support/quality-support...
https://semiconductor.samsung.com/support/quality-support...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.