Description
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target.
Affected products
samsung: exynos 1080 firmware; samsung: exynos 1080; samsung: exynos 1280 firmware; samsung: exynos 1280; samsung: exynos 1330 firmware; samsung: exynos 1330; samsung: exynos 1380 firmware; samsung: exynos 1380; samsung: exynos 1480 firmware; samsung: exynos 1480; samsung: exynos 2200 firmware; samsung: exynos 2200; samsung: exynos 2400 firmware; samsung: exynos 2400; samsung: exynos 850 firmware
References2
- semiconductor.samsung.com/support/quality-support/product-secur… Vendor Advisory
- semiconductor.samsung.com/support/quality-support/product-secur… Vendor Advisory
Metrics
- CVSS 3.1
-
7.5
HIGH
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 1% percentile: 44 · as of 10 November 2026
- CWE
- CWE-787
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.