9.8критическая
CVE-2025-52909
Описание
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 2 of 2.
Затрагиваемое ПО
Samsung Exynos w1000 firmwareSamsung Exynos w1000Samsung Exynos w920 firmwareSamsung Exynos w920Samsung Exynos w930 firmwareSamsung Exynos w930Samsung Exynos 980 firmwareSamsung Exynos 980Samsung Exynos 850 firmwareSamsung Exynos 850Samsung Exynos 1580 firmwareSamsung Exynos 1580Samsung Exynos 1480 firmwareSamsung Exynos 1480Samsung Exynos 1380 firmwareSamsung Exynos 1380Samsung Exynos 1330 firmwareSamsung Exynos 1330Samsung Exynos 1280 firmwareSamsung Exynos 1280
CVSS
| Балл | 9.8 — критическая |
| Вектор | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Источники
https://semiconductor.samsung.com/support/quality-support/product-security-updates/https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-52909/