CVE-2025-47202

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930…

Critical · published July 7, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

🔥 A sneaky lack of length checks in Samsung's processors means attackers could easily perform out-of-bounds writes! Think of it like a restaurant that never checks the size of an order — if someone orders a giant platter where only a small plate fits, it could spill everywhere, causing chaos in the kitchen and beyond! If exploited, this vulnerability could allow an attacker to overwrite critical data, potentially leading to system crashes, unauthorized access, or even remote control of the affected device. The ripple effects could be absolutely devastating for users, making their devices vulnerable to all sorts of malicious attacks!

Put simply

Think of it like a restaurant that never checks the size of an order — if someone orders a giant platter where only a small plate fits, it could spill everywhere, causing chaos in the kitchen and beyond! This vulnerability arises from improper input validation in the RRC component of various Samsung mobile processors, leading to out-of-bounds writes that malicious users could exploit to manipulate system memory.

What to do

If exploited, this vulnerability could allow an attacker to overwrite critical data, potentially leading to system crashes, unauthorized access, or even remote control of the affected device. The ripple effects could be absolutely devastating for users, making their devices vulnerable to all sorts of malicious attacks! Samsung needs to roll out patches for the affected processors—Exynos 980, 990, 850, 1080, 2100, and more. Users should check for updates regularly and install them as soon as they become available. Remember to stay vigilant and monitor for device announcements regarding this issue! You've got this! Stay informed, update your devices, and you'll be helping keep the internet safer! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00439 · 37.1th percentile
Published
2025-07-07T00:00Z
EPSS history
Timeline
  • 07 JUL 00:00Z
    In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930…
    cvelistv5