CVE-2025-27891
CRITICALDescription
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds reads via malformed NAS packets.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| samsung | exynos_980_firmware |
| samsung | exynos_980 |
| samsung | exynos_990_firmware |
| samsung | exynos_990 |
| samsung | exynos_850_firmware |
| samsung | exynos_850 |
| samsung | exynos_1080_firmware |
| samsung | exynos_1080 |
| samsung | exynos_2100_firmware |
| samsung | exynos_2100 |
| samsung | exynos_1280_firmware |
| samsung | exynos_1280 |
| samsung | exynos_2200_firmware |
| samsung | exynos_2200 |
| samsung | exynos_1330_firmware |
| samsung | exynos_1330 |
| samsung | exynos_1380_firmware |
| samsung | exynos_1380 |
| samsung | exynos_1480_firmware |
| samsung | exynos_1480 |
| samsung | exynos_2400_firmware |
| samsung | exynos_2400 |
| samsung | exynos_w920_firmware |
| samsung | exynos_w920 |
| samsung | exynos_w930_firmware |
| samsung | exynos_w930 |
| samsung | exynos_w1000_firmware |
| samsung | exynos_w1000 |
| samsung | exynos_modem_5123_firmware |
| samsung | exynos_modem_5123 |
| samsung | exynos_modem_5300_firmware |
| samsung | exynos_modem_5300 |
| samsung | exynos_modem_5400_firmware |
| samsung | exynos_modem_5400 |
References
Frequently Asked Questions
What is CVE-2025-27891? +
How severe is CVE-2025-27891? +
What products are affected by CVE-2025-27891? +
How do I check if I'm vulnerable to CVE-2025-27891? +
Related Vulnerabilities
libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on assert() …
An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system …
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read …
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.7.0, …
Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to …
An Out-of-bounds Read vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation …