What is the CVSS score of CVE-2025-66363?

CVE-2025-66363 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Exynos 2200 Firmware are affected by CVE-2025-66363?

Samsung Exynos 2200 mobile processors contain a memory initialization flaw in LBS (Location-Based Services) that could be exploited to access sensitive data or cause device instability.

How to fix or mitigate CVE-2025-66363?

Within 24 hours: Identify and inventory all Samsung devices using Exynos 2200 processors in your environment. Within 7 days: Disable LBS functionality on affected devices via MDM if business-critical, and communicate risk to device users. Within 30 days: Monitor Samsung security advisories for patches, prepare deployment procedures, and evaluate whether to restrict affected devices from handling sensitive location data pending remediation.

Exynos 2200 Firmware CVE-2025-66363

HIGH

Improper Initialization (CWE-665)

2026-03-03 cve@mitre.org

Samsung Exynos 2200 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 16:16 nvd

HIGH 7.5

DescriptionCVE.org

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages.

AnalysisAI

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages. [CVSS 7.5 HIGH]

Technical ContextAI

Affects Exynos 2200 Firmware. An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Exynos 2200 Firmware

View all

CVE-2023-28613 CRITICAL Act Now

9.8 Apr 04

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, an

CVE-2023-26076 CRITICAL Act Now

9.8 Mar 13

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem

CVE-2023-26073 CRITICAL Act Now

9.8 Mar 13

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Ex

CVE-2023-26074 CRITICAL Act Now

9.8 Mar 13

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Ex

CVE-2023-26072 CRITICAL Act Now

9.8 Mar 13

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Ex

CVE-2023-26075 CRITICAL Act Now

9.8 Mar 10

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Ex

CVE-2025-47202 CRITICAL Act Now

9.1 Jul 07

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 13

CVE-2025-27807 CRITICAL Act Now

9.1 Jan 05

Samsung Exynos processors (multiple models including 980, 990, 2100, 2200, 2400) and modems have an out-of-bounds write

CVE-2025-23102 HIGH This Week

8.8 Jun 03

Double-free vulnerability in Samsung's Exynos mobile processors (models 980, 990, 1080, 2100, 1280, 2200, 1380, 1480, an

CVE-2024-39890 HIGH This Week

8.1 Dec 02

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108

CVE-2024-29153 HIGH This Week

8.1 Jul 09

A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Ex

CVE-2025-23098 HIGH This Week

7.8 Jun 03

Use-After-Free (UAF) vulnerability in Samsung's Exynos mobile processors (980, 990, 1080, 2100, 1280, 2200, 1380) that e

Same weakness CWE-665 – Improper Initialization

View all

CVE-2022-0847 HIGH POC

7.8

CVE-2013-1675 MEDIUM POC

6.5

CVE-2023-1719 CRITICAL POC

9.8

CVE-2022-36061 CRITICAL POC

9.8

CVE-2022-37128 CRITICAL POC

9.8

CVE-2019-20063 HIGH POC

8.8

CVE-2017-13715 CRITICAL

9.8

CVE-2017-14609 HIGH POC

7.8

CVE-2025-66363 vulnerability details – vuln.today

Back

Exynos 2200 Firmware CVE-2025-66363

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Exynos 2200 Firmware

Same weakness CWE-665 – Improper Initialization

Share

External POC / Exploit Code