What is the CVSS score of CVE-2025-23099?

CVE-2025-23099 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Exynos 1480 Firmware are affected by CVE-2025-23099?

A critical vulnerability in Samsung's Exynos mobile processors (1480 and 2400) allows remote attackers to execute arbitrary code through memory corruption.

How to fix or mitigate CVE-2025-23099?

Within 24 hours: Identify and document all affected devices in your environment (Samsung devices with Exynos 1480/2400 processors). Within 7 days: Implement device restrictions (disable untrusted app installations, enforce MDM policies, restrict network access if feasible). Within 30 days: Monitor Samsung security advisories for firmware patches and establish an expedited deployment plan once available; escalate communications with affected device users.

Exynos 1480 Firmware CVE-2025-23099

EUVD-2025-16677 CRITICAL

Out-of-bounds Write (CWE-787)

2025-06-02 cve@mitre.org

Buffer Overflow Samsung Exynos 1480 Firmware Exynos 2400 Firmware

9.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 16:47 euvd

EUVD-2025-16677

Analysis Generated

Mar 14, 2026 - 16:47 vuln.today

CVE Published

Jun 02, 2025 - 19:15 nvd

CRITICAL 9.1

DescriptionCVE.org

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes.

AnalysisAI

OOB write in Samsung Exynos 1480/2400 processors.

Technical ContextAI

CWE-787 missing length check.

RemediationAI

Apply Samsung security update.

More in Exynos 1480 Firmware

View all

CVE-2025-47202 CRITICAL Act Now

9.1 Jul 07

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 13

CVE-2025-27807 CRITICAL Act Now

9.1 Jan 05

Samsung Exynos processors (multiple models including 980, 990, 2100, 2200, 2400) and modems have an out-of-bounds write

CVE-2025-23102 HIGH This Week

8.8 Jun 03

Double-free vulnerability in Samsung's Exynos mobile processors (models 980, 990, 1080, 2100, 1280, 2200, 1380, 1480, an

CVE-2025-23107 HIGH This Week

8.6 Jun 03

Critical out-of-bounds write vulnerability in Samsung's Exynos 1480 and 2400 mobile processors caused by insufficient le

CVE-2025-23103 HIGH This Week

8.6 Jun 03

CVE-2025-23103 is an out-of-bounds write vulnerability in Samsung's Exynos 1480 and 2400 mobile processors caused by ins

CVE-2025-53966 HIGH This Week

8.4 Jan 05

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211

CVE-2025-49495 HIGH This Week

8.4 Jan 05

An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an

CVE-2024-39890 HIGH This Week

8.1 Dec 02

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108

CVE-2025-23105 HIGH This Week

7.8 Jun 02

Use-after-free vulnerability in Samsung's Exynos mobile processors (2200, 1480, and 2400) that allows a local attacker w

CVE-2024-31960 HIGH This Week

7.8 Sep 10

An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. Rated high severity (CVSS 7.8), this vulne

CVE-2024-27387 HIGH This Week

7.8 Sep 09

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. R

CVE-2024-27383 HIGH This Week

7.8 Sep 09

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. R

Same weakness CWE-787 – Out-of-bounds Write

View all

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2012-1889 HIGH POC

8.8

CVE-2010-3333 HIGH POC

7.8

CVE-2014-1761 HIGH POC

7.8

CVE-2009-3129 HIGH POC

7.8

CVE-2021-1732 HIGH POC

7.8

CVE-2013-3346 CRITICAL POC

9.8

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2017-11882 HIGH POC

7.8

CVE-2010-3333 HIGH POC

7.8

CVE-2025-23099 vulnerability details – vuln.today

Back

Exynos 1480 Firmware CVE-2025-23099

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Exynos 1480 Firmware

Same weakness CWE-787 – Out-of-bounds Write

Same technique Buffer Overflow

Share

External POC / Exploit Code