CVE Catalog

CVE-2025-58349

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

23th percentile - higher than 23% of all known CVEs

Summary

In Samsung Mobile Processor, Wearable Processor, and Modem Exynos (including 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400), an issue was discovered in L2. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to baseband crashes.

Risk Assessment

The organization risks service disruptions on mobile devices using these processors, potentially affecting service availability and communication.

Recommendation

Apply firmware updates provided by Samsung that fix this vulnerability.

Original NVD description (English source)

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to baseband crashes.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS