Vulnerability Intelligence Report
CVE-2025-27891
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds reads via malformed NAS packets.
No Active Exploit Signals
CVSS Base Score
9.1
CRITICAL
Exploitability:3.9
Impact Score:5.2
EPSS Probability:0.40%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-125 ↗CWE-125 Out-of-bounds Read
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| samsung | exynos_980_firmware | all |
| samsung | exynos_980 | all |
| samsung | exynos_990_firmware | all |
| samsung | exynos_990 | all |
| samsung | exynos_850_firmware | all |
| samsung | exynos_850 | all |
| samsung | exynos_1080_firmware | all |
| samsung | exynos_1080 | all |
| samsung | exynos_2100_firmware | all |
| samsung | exynos_2100 | all |
| samsung | exynos_1280_firmware | all |
| samsung | exynos_1280 | all |
| samsung | exynos_2200_firmware | all |
| samsung | exynos_2200 | all |
| samsung | exynos_1330_firmware | all |
| samsung | exynos_1330 | all |
| samsung | exynos_1380_firmware | all |
| samsung | exynos_1380 | all |
| samsung | exynos_1480_firmware | all |
| samsung | exynos_1480 | all |
| samsung | exynos_2400_firmware | all |
| samsung | exynos_2400 | all |
| samsung | exynos_w920_firmware | all |
| samsung | exynos_w920 | all |
| samsung | exynos_w930_firmware | all |
| samsung | exynos_w930 | all |
| samsung | exynos_w1000_firmware | all |
| samsung | exynos_w1000 | all |
| samsung | exynos_modem_5123_firmware | all |
| samsung | exynos_modem_5123 | all |
| samsung | exynos_modem_5300_firmware | all |
| samsung | exynos_modem_5300 | all |
| samsung | exynos_modem_5400_firmware | all |
| samsung | exynos_modem_5400 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.398%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2025-03-10T00:00:00 |
| Published | 2025-05-14T00:00:00 |
| Last Updated | 2025-05-20T14:27:14 |
Community Chatter & Buzz