CVE-2025-54324
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A vulnerability in the NAS (Non-Access Stratum) layer of Samsung Exynos processors and modems allows a Denial of Service attack via improper handling of a DL NAS Transport packet. The issue affects a wide range of mobile, wearable, and modem chipsets.
Risk Assessment
An attacker can remotely cause network service disruption on the device, leading to loss of connectivity and service unavailability for the end user.
Recommendation
Immediately apply security patches provided by Samsung for the affected processors and modems. Also monitor firmware updates from device manufacturers.
Other vulnerabilities in Samsung Exynos
See all- CVE-2025-53966High
In Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580, a vulnerability was found related to incorrect handling of NL80211 vendor commands, leading to a buffer overflow during IOCTL message processing.
- CVE-2025-43706High
A vulnerability was discovered in the L2 layer of Samsung Mobile Processor, Wearable Processor, and Modem Exynos models 980, 990, 850, 1080, 2400, 1580, 9110, W920, W930, Modem 5123, and Modem 5400. Incorrect handling of RRC packets leads to a Denial of Service.
- CVE-2025-52519High
A vulnerability was discovered in the Camera of Samsung Mobile and Wearable Processors Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Improper validation of user-space input in the issimian device driver leads to information disclosure and denial of service.
- CVE-2025-54328Critical
In Samsung Exynos mobile processors, Wearable Processor, and Modem, a stack-based buffer overflow vulnerability exists while parsing SMS RP-DATA messages. An attacker can send a crafted SMS message, causing a buffer overflow and potentially arbitrary code execution.
- CVE-2025-58349Critical
In Samsung Mobile Processor, Wearable Processor, and Modem Exynos (including 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400), an issue was discovered in L2. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to baseband crashes.
- CVE-2025-27807Critical
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes via malformed NAS packets.
- CVE-2025-57834High
A lack of input validation in Samsung Exynos processors and modems leads to a Denial of Service (DoS).
Original NVD description (English source)
An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect Handling of a DL NAS Transport packet leads to a Denial of Service.