PT-2025-21232 · Samsung · Exynos Modem 5400 +18

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 980 through 9825 Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 990 Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 850...

Several Samsung products have vulnerabilities related to buffer errors.

SAMSUNG Exynos 1080 and others are products of Samsung South Korea.SAMSUNG Exynos 1080 is a processor used in mobile devices.SAMSUNG Exynos 1280 is a processor used in mobile devices.SAMSUNG Exynos 1480 is a processor used in cell phone chips. A buffer error vulnerability exists in various SAMSUN...

Samsung’s various products have vulnerabilities related to resource management.

SAMSUNG Exynos and SAMSUNG Exynos Modem 5300 are both products of Samsung South Korea.SAMSUNG Exynos is a series of SoC, Arm architecture based processors developed and manufactured by Samsung Mobile.SAMSUNG Exynos Modem The SAMSUNG Exynos Modem 5300 is a modem. A security vulnerability exists in...

Several Samsung products have security vulnerabilities

SAMSUNG Exynos 1080 and others are products of Samsung South Korea.SAMSUNG Exynos 1080 is a processor for mobile devices.SAMSUNG Exynos 1280 is a processor for mobile devices.SAMSUNG Exynos 2400 is a processor for cell phone chips. A security vulnerability exists in various SAMSUNG products, whic...

Several Samsung products have security vulnerabilities

SAMSUNG Exynos 9820 and others are products of the South Korean company Samsung SAMSUNG.SAMSUNG Exynos 9820 is a processor for mobile devices.SAMSUNG Exynos 980 is a first 5G integrated Soc product and the world's first A77 architecture processor.SAMSUNG Exynos 9825 is a mobile processor. A...

CVE-2025-20670

In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with User execution privileges needed. User interaction is needed for exploitation...

CVE-2025-20670

In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with User execution privileges needed. User interaction is needed for exploitation...

CVE-2025-20666

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

CVE-2025-20670

CVE-2025-20670 concerns a vulnerability in a Modem where improper certificate validation enables a permission bypass, potentially causing remote information disclosure if a UE connects to a rogue base station controlled by an attacker. Exploitation requires user interaction and the attacker would...

CVE-2025-20667

CVE-2025-20667 concerns a remote information disclosure in the Modem due to incorrect error handling. The vulnerability allows information disclosure without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker, with no additional execution privileg...

CVE-2025-20667

In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20666

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

CVE-2025-20670: Improper Certificate Validation

In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with User execution privileges needed. User interaction is needed for exploitation...

CVE-2025-20667: Inadequate Encryption Strength

In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20666: Reachable Assertion

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

PT-2025-19333

Name of the Vulnerable Software and Affected Versions Huawei Modem affected versions not specified Description The issue is related to a possible permission bypass due to improper certificate validation in the Modem. This could lead to remote information disclosure if a UE has connected to a rogu...

PT-2025-19331

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to incorrect error handling in the Modem, which could lead to remote information disclosure if a UE has connected to a rogue base station controlled by the attacker. No...

PT-2025-19330

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker,...

CVE-2024-6029

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...

CVE-2024-6032

Tesla Model S Iris Modem qlatfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this...