Baseband Crash Vulnerability in Samsung Semiconductor Products
CVE-2025-66366

Currently unrated

Key Information:

Vendor: Samsung Semiconductor
Status: Exynos 1280; Exynos 1330; Exynos 1380; Exynos 1480
Vendor: CVE Published:; 5 November 2026

🔔 Create Samsung Semiconductor Vulnerability Alert

What is CVE-2025-66366?

The vulnerability arises from the faulty handling of unauthenticated downlink RRC Setup messages, which can lead to crashes in the baseband of affected Samsung semiconductor products. This situation poses potential risks for system stability and security, making it critical for users and stakeholders to apply necessary updates and mitigate exposure.

Affected Version(s)

Exynos 1280 0

Exynos 1330 0

Exynos 1380 0

References

https://semiconductor.samsung.com/support/quality-support...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 5, 2026
Vulnerability Reserved
Nov 28, 2025

CVE-2025-66366 Data

JSON