Memory Allocation Vulnerability in Samsung Mobile and Wearable Processors
CVE-2025-58340

6.2MEDIUM

Key Information:

Vendor

Samsung
Status
Exynos Mobile and Wearable Processors
Vendor
CVE Published:
3 February 2026

What is CVE-2025-58340?

A vulnerability has been identified in the Wi-Fi driver of several Samsung Mobile and Wearable Processors, which includes the Exynos series up to 2200 and related models. This issue arises due to unbounded memory allocation stemming from a large buffer during write operations to /proc/driver/unifi0/send_delts. This problem can lead to kernel memory exhaustion, posing risks to system stability and performance. Users of affected processors should take necessary precautions and keep an eye on updates from Samsung.

References

https://semiconductor.samsung.com/support/quality-support...
https://semiconductor.samsung.com/support/quality-support...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.