Use-After-Free Vulnerability in Samsung Mobile and Wearable Processors
CVE-2025-54602

7HIGH

Key Information:

Vendor

Samsung
Status
Exynos Processors
Vendor
CVE Published:
6 April 2026

What is CVE-2025-54602?

A use-after-free vulnerability exists in the Wi-Fi driver of Samsung's Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 processors. This vulnerability arises from improper synchronization of a global variable, enabling potential attackers to exploit the weakness by triggering a race condition through concurrent execution of ioctl functions across multiple threads. This issue highlights the importance of secure coding practices and timely updates to protect devices from potential threats.

References

https://semiconductor.samsung.com/support/quality-support...
https://semiconductor.samsung.com/support/quality-support...

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.