CVE-2025-54328
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
In Samsung Exynos mobile processors, Wearable Processor, and Modem, a stack-based buffer overflow vulnerability exists while parsing SMS RP-DATA messages. An attacker can send a crafted SMS message, causing a buffer overflow and potentially arbitrary code execution.
Risk Assessment
An attacker can remotely trigger arbitrary code execution on the device by sending a specially crafted SMS message.
Recommendation
Apply the patch provided by Samsung for the affected processors and modems.
Original NVD description (English source)
An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.