ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2025-54602
7высокая

CVE-2025-54602

Описание

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.

Затрагиваемое ПО
Samsung Exynos 980 firmwareSamsung Exynos 980Samsung Exynos 850 firmwareSamsung Exynos 850Samsung Exynos 1080 firmwareSamsung Exynos 1080Samsung Exynos 1280 firmwareSamsung Exynos 1280Samsung Exynos 1330 firmwareSamsung Exynos 1330Samsung Exynos 1380 firmwareSamsung Exynos 1380Samsung Exynos 1480 firmwareSamsung Exynos 1480Samsung Exynos 1580 firmwareSamsung Exynos 1580Samsung Exynos w1000 firmwareSamsung Exynos w1000Samsung Exynos w920 firmwareSamsung Exynos w920Samsung Exynos w930 firmwareSamsung Exynos w930
CVSS
Балл7 — высокая
ВекторCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://semiconductor.samsung.com/support/quality-support/product-security-updates/https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54602/