Description
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via malformed ROHC packets.
Affected products
samsung: exynos 980 firmware; samsung: exynos 980; samsung: exynos 990 firmware; samsung: exynos 990; samsung: exynos 850 firmware; samsung: exynos 850; samsung: exynos 1080 firmware; samsung: exynos 1080; samsung: exynos 2100 firmware; samsung: exynos 2100; samsung: exynos 1280 firmware; samsung: exynos 1280; samsung: exynos 2200 firmware; samsung: exynos 2200; samsung: exynos 1330 firmware
References2
- semiconductor.samsung.com/support/quality-support/product-secur… Vendor Advisory
- semiconductor.samsung.com/support/quality-support/product-secur… Vendor Advisory
Metrics
- CVSS 3.1
-
6.5
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - EPSS — exploit probability
- 0% percentile: 13 · as of 8 November 2026
- CWE
- CWE-125
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.