CVE-2025-27807

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580…

Critical · published January 5, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

🚨 A lack of length checks in Samsung's Exynos processors could allow attackers to write beyond their limits — think of sending a package with no address and hoping it finds its way! 🔥 Imagine a delivery person who leaves a package at a random house because the address label was too short. No one checks where it’s supposed to go, and chaos ensues! That's how this out-of-bounds write vulnerability works, with malformed NAS packets leading to potential misrouting of data. If exploited, an attacker could overwrite critical areas in memory, potentially leading to crashes or malicious code execution. This is a significant risk, affecting the integrity of your device and possibly allowing unauthorized commands to be executed at will. Your device's security could be compromised in serious ways!

Put simply

Imagine a delivery person who leaves a package at a random house because the address label was too short. No one checks where it’s supposed to go, and chaos ensues! That's how this out-of-bounds write vulnerability works, with malformed NAS packets leading to potential misrouting of data. This vulnerability arises from the failure to validate the length of incoming NAS packets for various Samsung processors, resulting in out-of-bounds writes. When these malformed packets are processed, they can corrupt memory or execute unintended operations.

What to do

If exploited, an attacker could overwrite critical areas in memory, potentially leading to crashes or malicious code execution. This is a significant risk, affecting the integrity of your device and possibly allowing unauthorized commands to be executed at will. Your device's security could be compromised in serious ways! To safeguard against this vulnerability, immediately check for software updates from Samsung and apply them. Additionally, consider enabling security features and monitoring network traffic to detect any unusual activities related to NAS packets. Stay vigilant! You've got this! By taking these steps, you're one step closer to being a security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.2th percentile
Published
2026-01-05T00:00Z
EPSS history
Timeline
  • 05 JAN 00:00Z
    An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580…
    cvelistv5