What is the CVSS score of CVE-2025-23097?

CVE-2025-23097 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Exynos 1380 Firmware are affected by CVE-2025-23097?

A critical vulnerability in Samsung's Exynos 1380 processor enables remote code execution through memory corruption, affecting millions of Galaxy devices globally.

How to fix or mitigate CVE-2025-23097?

Within 24 hours: Identify and inventory all devices using Exynos 1380 processors and restrict their use in sensitive environments. Within 7 days: Implement enhanced monitoring for suspicious device behavior, disable unnecessary processor features/services where possible, and establish a vendor patch readiness plan. Within 30 days: Develop a device replacement or firmware update strategy pending Samsung's patch release and conduct security reassessment of affected systems.

Exynos 1380 Firmware CVE-2025-23097

EUVD-2025-16783 CRITICAL

Out-of-bounds Write (CWE-787)

2025-06-03 cve@mitre.org

Buffer Overflow Samsung Exynos 1380 Firmware

9.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 17:04 euvd

EUVD-2025-16783

Analysis Generated

Mar 14, 2026 - 17:04 vuln.today

CVE Published

Jun 03, 2025 - 20:15 nvd

CRITICAL 9.1

DescriptionCVE.org

An issue was discovered in Samsung Mobile Processor Exynos 1380. The lack of a length check leads to out-of-bounds writes.

AnalysisAI

OOB write in Samsung Exynos 1380 processor.

Technical ContextAI

CWE-787.

RemediationAI

Apply security update.

More in Exynos 1380 Firmware

View all

CVE-2025-47202 CRITICAL Act Now

9.1 Jul 07

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 13

CVE-2025-27807 CRITICAL Act Now

9.1 Jan 05

Samsung Exynos processors (multiple models including 980, 990, 2100, 2200, 2400) and modems have an out-of-bounds write

CVE-2025-23102 HIGH This Week

8.8 Jun 03

Double-free vulnerability in Samsung's Exynos mobile processors (models 980, 990, 1080, 2100, 1280, 2200, 1380, 1480, an

CVE-2025-53966 HIGH This Week

8.4 Jan 05

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211

CVE-2025-49495 HIGH This Week

8.4 Jan 05

An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an

CVE-2024-32502 HIGH This Week

8.4 Jun 07

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos

CVE-2024-39890 HIGH This Week

8.1 Dec 02

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108

CVE-2024-29153 HIGH This Week

8.1 Jul 09

A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Ex

CVE-2025-23098 HIGH This Week

7.8 Jun 03

Use-After-Free (UAF) vulnerability in Samsung's Exynos mobile processors (980, 990, 1080, 2100, 1280, 2200, 1380) that e

CVE-2024-27387 HIGH This Week

7.8 Sep 09

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. R

CVE-2024-27383 HIGH This Week

7.8 Sep 09

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. R

CVE-2024-32504 HIGH This Week

7.8 Jun 13

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos

Same weakness CWE-787 – Out-of-bounds Write

View all

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2012-1889 HIGH POC

8.8

CVE-2010-3333 HIGH POC

7.8

CVE-2014-1761 HIGH POC

7.8

CVE-2009-3129 HIGH POC

7.8

CVE-2021-1732 HIGH POC

7.8

CVE-2013-3346 CRITICAL POC

9.8

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2017-11882 HIGH POC

7.8

CVE-2010-3333 HIGH POC

7.8

CVE-2025-23097 vulnerability details – vuln.today

Back

Exynos 1380 Firmware CVE-2025-23097

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Exynos 1380 Firmware

Same weakness CWE-787 – Out-of-bounds Write

Same technique Buffer Overflow

Share

External POC / Exploit Code