What is the CVSS score of CVE-2025-23099?

CVE-2025-23099 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Exynos 1480 Firmware are affected by CVE-2025-23099?

A critical vulnerability in Samsung's Exynos mobile processors (1480 and 2400) allows remote attackers to execute arbitrary code through memory corruption.

How to fix or mitigate CVE-2025-23099?

Within 24 hours: Identify and document all affected devices in your environment (Samsung devices with Exynos 1480/2400 processors). Within 7 days: Implement device restrictions (disable untrusted app installations, enforce MDM policies, restrict network access if feasible). Within 30 days: Monitor Samsung security advisories for firmware patches and establish an expedited deployment plan once available; escalate communications with affected device users.

Exynos 1480 Firmware CVE-2025-23099

EUVD-2025-16677 CRITICAL

Out-of-bounds Write (CWE-787)

2025-06-02 cve@mitre.org

Buffer Overflow Samsung Exynos 1480 Firmware Exynos 2400 Firmware

9.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 16:47 euvd

EUVD-2025-16677

Analysis Generated

Mar 14, 2026 - 16:47 vuln.today

CVE Published

Jun 02, 2025 - 19:15 nvd

CRITICAL 9.1

DescriptionNVD

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes.

AnalysisAI

OOB write in Samsung Exynos 1480/2400 processors.

Technical ContextAI

CWE-787 missing length check.

RemediationAI

Apply Samsung security update.

More from same product – last 7 days

CVE-2026-8915 HIGH This Week

8.8 May 28

Out-of-bounds write in Samsung's Escargot JavaScript engine allows attacker-supplied scripts to corrupt memory through t

CVE-2026-45956 Awaiting Data

May 27

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv->vidi_dev for ctx lookup

CVE-2026-45958 Awaiting Data

May 27

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferenci

CVE-2025-23099 vulnerability details – vuln.today

Back

Exynos 1480 Firmware CVE-2025-23099

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More from same product – last 7 days

Share

External POC / Exploit Code