CVEvulnerability

CVE-2025-52908

9.8 CRITICAL Published 2026-04-07 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-04-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120

Description

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 1 of 2.

Affected configurations

• samsung exynos w1000 firmware • samsung exynos w920 firmware • samsung exynos w930 firmware • samsung exynos 980 firmware • samsung exynos 850 firmware • samsung exynos 1580 firmware • samsung exynos 1480 firmware • samsung exynos 1380 firmware • samsung exynos 1330 firmware • samsung exynos 1280 firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References