What is the CVSS score of CVE-2025-59439?

CVE-2025-59439 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Exynos 9110 Firmware are affected by CVE-2025-59439?

Samsung mobile devices and wearables using Exynos processors are vulnerable to denial-of-service attacks through malformed network registration messages, potentially disrupting device connectivity…

How to fix or mitigate CVE-2025-59439?

Within 24 hours: Inventory all Samsung devices using affected Exynos processors (980, 990, 850, 1080, 9110) and modems in your organization. Within 7 days: Implement network monitoring for suspicious NAS registration traffic patterns and communicate risk assessment to business units. Within 30 days: Establish a vendor patch tracking process with Samsung and evaluate device replacement strategy for high-risk use cases; consider restricting affected devices from critical infrastructure access pending patch availability.

Exynos 9110 Firmware CVE-2025-59439

HIGH

Uncontrolled Resource Consumption (CWE-400)

2026-02-03 cve@mitre.org

Samsung Denial Of Service Exynos 9110 Firmware Exynos W930 Firmware Exynos 990 Firmware Exynos 1080 Firmware Exynos W1000 Firmware Exynos 980 Firmware Exynos 850 Firmware Exynos Modem 5123 Firmware Exynos W920 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 03, 2026 - 18:16 nvd

HIGH 7.5

DescriptionCVE.org

An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions.

AnalysisAI

Technical ContextAI

Classified as CWE-400 (Uncontrolled Resource Consumption). Affects Exynos 990 Firmware. An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions.