CVE-2023-50805

CVE-2023-50805 affects Samsung Mobile Processor, Wearable Processor, and Modems across Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/1330/9110/W920/W930, and Exynos Modem 5123/5300. The vulnerability is an out-of-bounds write in the heap encountered in 2G (no authentication required). Mul...

CVE-2023-37368

The CVE-2023-37368 issue affects Samsung Exynos Mobile/Automotive/Modem SoCs (multiple Exynos SKUs listed). In the Shannon MM Task, there is missing validation of a NULL pointer, which can cause abnormal termination via a malformed NR MM packet. Impact is denial of service due to crash; no explic...

CVE-2023-49927

CVE-2023-49927 affects Samsung Mobile Processor, Wearable Processor, and Modem Exynos families (980, 990, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, and related modems). The baseband software fails to properly validate the RRC format types, leading to insufficient encryption. This is de...

CVE-2023-50804

CVE-2023-50804 concerns Samsung baseband/modem software in Exynos devices where NAS (Non-Access‑Stratum) format type checking is insufficient, enabling authentication bypass in the baseband stack. The issue affects multiple Exynos SoCs (e.g., Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/...

CVE-2023-50803

CVE-2023-50803 affects Samsung Mobile Processor baseband/modem (several Exynos models). The issue is that replay protection in NAS is not properly checked by the baseband, enabling potential denial of service. Connected sources confirm the vulnerability in Samsung Exynos modem stack and list DoS ...

CVE-2023-41111

CVE-2023-41111 affects Samsung Mobile Processor, Wearable Processor, Automotive Processor and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, Auto T5123). Root cause: improper handling of a length parameter inconsistency in the RLC...

CVE-2023-49928

CVE-2023-49928 affects Samsung Exynos baseband, including Exynos 980, 990, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Exynos Modem 5123, and 5300. The baseband software does not properly check states defined by the RRC, which can lead to the disclosure of sensitive information. Public c...

CVE-2023-50806

CVE-2023-50806 affects Samsung Mobile Processor, Wearable Processor, and Modems (Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/1330/9110/W920/W930, Exynos Modem 5123, 5300). Description: an out-of-bounds heap-buffer access in the SIM Proactive Command. Impact and likelihood: CVSSv3.1 base...

CVE-2023-36481

CVE-2023-36481 affects Samsung Exynos Mobile Processor and Wearable Processor family (models 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920). The issue is due to improper handling of PPP length parameter inconsistency, which can cause an infinite loop. Connected source...

CVE-2024-28068

CVE-2024-28068 describes a NULL pointer dereference in Samsung Exynos-based Mobile/Wearable Processors and Modems (multiple Exynos SKUs; e.g., Exynos 9820–2400, 9110, W920/W930, Modem 5123/5300). Impact: potential abnormal termination of a mobile device via a manipulated packet. Connected sources...

CVE-2024-44068

The CVE-2024-44068 issue affects Samsung Exynos devices (M2M scaler driver in Mobile Processor and Wearable Processor families: Exynos 9820/9825/980/990/850/W920). Root cause: use-after-free in the m2m scaler driver leading to privilege escalation. Impact: arbitrary code execution with high confi...

CVE-2024-29153

The CVE-2024-29153 entry affects Samsung Mobile Processor, Wearable Processor, and Modems (Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/1330/9110/W920/W930, Modem 5123/5300). Root cause: incorrect authorization of LTE NAS messages, enabling downgrades to lower network generations and rep...

CVE-2024-39890

CVE-2024-39890 affects Samsung baseband software in multiple Exynos lines (Mobile Processor, Wearable Processor, Modem) including Exynos 980–9825, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920/W930/W1000, as well as Modems 5123 and 5300. The issue is that the baseband does ...

CVE-2024-48883

CVE-2024-48883 affects Samsung Exynos/Modem family (UEs in Samsung Mobile Processor, Wearable Processor, Modem 980–9825, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300). The issue arises from the UE incorrectly handling a malformed uplink...

CVE-2023-41112

CVE-2023-41112 affects Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem families (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, plus Modem 5123/5300 and Auto T5123). Root cause: a buffer copy without input size validation in the RL...

CVE-2024-25073

Summary: A vulnerability (CVE-2024-25073) affects Samsung Semiconductor Mobile Processor and Modem Exynos families (versions 9820–9825, 980–990, 850–1080, 2100–2200, 1280–1380, 1330, 9110, W920, W930, Modem 5123, 5300). The baseband software does not properly check a pointer in the Call Control (...

CVE-2023-42483

CVE-2023-42483 affects Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380. The root cause is a TOCTOU race condition that can cause an unexpected termination of the system, indicating an availability impact. Exploitation status and concrete exploit details are not provide...

CVE-2023-37367

Summary (CVE-2023-37367) : Affects Samsung Exynos families (Exynos 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, Exynos Modem 5123/5300, Exynos Auto T5123) in Samsung Exynos Mobile Processor, Automotive Processor, and Modem. The root cause is an improperly implemented security check in the ...

CVE-2024-52923

CVE-2024-52923 affects Samsung NRMM components on multiple Exynos-powered devices (phones, wearables) and associated Modems. The issue is a lack of boundary checking during the decoding of DL NAS Transport messages, which can lead to a Denial of Service. Connected sources confirm the affected pro...

CVE-2024-52924

CVE-2024-52924 involves NRMM in Samsung devices: Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820/9825/980/990/850/1080/2100/1280/2200/1330/1380/1480/2400/9110, W920, W930, W1000, Modems 5123/5300/5400. The issue is a lack of boundary checking during the decoding of Registratio...

CVE-2024-45185

CVE-2024-45185 affects Samsung Exynos family: Samsung Mobile Processor, Wearable Processor, and Modem Exynos devices. Root cause is a heap overflow in the GPRS protocol leading to an out-of-bounds write. Affected versions include Samsung Mobile Processor, Wearable Processor, and Modem Exynos vers...

CVE-2024-25074

The CVE-2024-25074 issue affects Samsung Semiconductor Mobile Processor and Modem lines, including Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/1330/9110/W920/W930 and Modems 5123 and 5300. The root cause is that the baseband software does not properly check a pointer provided by the Ses...

CVE-2024-46921

The CVE-2024-46921 issue affects Samsung Mobile Processor and Modem lines (Exynos 9820/9825/980/990/1080/2100/1280/2200/1330/1380/1480/2400/9110/W1000 and Modem 5123/5300/5400). The vulnerability is that the UE does not throttle the number of attempts for the 5G SA RRC Setup procedure, which can ...

CVE-2024-45184

The CVE-2024-45184 issue affects Samsung Mobile Processor, Wearable Processor, and Modems (Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, 5300). Root cause: a USAT out-of-bounds write caused by a heap buffer overflow. Impact: Denial...

CVE-2023-40218

CVE-2023-40218 affects Samsung Exynos Mobile Processor NPU kernel driver. The issue is an integer overflow in the kernel driver that can bypass detection of error cases when a crafted application is used. Affected devices include Exynos 9820, 980, 2100, 2200, 1280, and 1380. The impact is describ...

CVE-2023-45864

The CVE-2023-45864 entry describes a race condition in Samsung Mobile Processor Exynos 9820/980/1080/2100/2200/1280/1380 that allows unintended modifications of values in certain areas. Affected component: Exynos-based processors; root cause: race condition. Impact as described is the ability to ...

CVE-2024-46920

The CVE-2024-46920 issue affects Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Root cause: a missing length check causes a stack out-of-bounds write at loadInputBuffers. This has been consistently reported across multiple feeds (NVD/Red Hat/CNNVD) with no explic...

CVE-2024-46919

The CVE-2024-46919 issue affects Samsung Mobile Processor Exynos families: 980–9825, 990, 850, 1080, 2100, and 1280. The root cause is a missing length check that enables a stack out-of-bounds write in loadOutputBuffers. Connected sources (NVD, Red Hat, CNNVD, CVE lists, PT Security) corroborate ...

CVE-2025-27374

CVE-2025-27374 affects Samsung’s Secure Boot component on Exynos Mobile/Wearable Processors (models listed in the document). The issue is a missing length check that can lead to out-of-bounds writes. The connected records repeatedly describe the same flaw but do not provide concrete exploit detai...