What is the CVSS score of EUVD-2025-16785?

EUVD-2025-16785 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Exynos 1380 Firmware are affected by EUVD-2025-16785?

CVE-2025-23098 affects Samsung mobile processors used in devices across the organization, potentially allowing attackers to gain elevated system privileges.

How to fix or mitigate EUVD-2025-16785?

Within 24 hours: Identify all devices using affected Samsung Exynos processors (980, 990, 1080, 2100, 1280, 2200, 1380) and isolate them from critical networks if possible. Within 7 days: Issue a security advisory to all users advising against installing untrusted applications and enabling installation from unknown sources; establish daily monitoring for vendor patches. Within 30 days: Prepare device refresh strategy and evaluate whether to deprioritize affected devices for sensitive operations until Samsung releases a patch.

Exynos 1380 Firmware EUVD-2025-16785

| CVE-2025-23098 HIGH

Use After Free (CWE-416)

2025-06-03 cve@mitre.org

Use After Free Privilege Escalation Samsung Exynos 1380 Firmware Exynos 2100 Firmware Exynos 2200 Firmware Exynos 990 Firmware Exynos 1080 Firmware Exynos 1280 Firmware Exynos 980 Firmware

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 17:04 euvd

EUVD-2025-16785

Analysis Generated

Mar 14, 2026 - 17:04 vuln.today

CVE Published

Jun 03, 2025 - 20:15 nvd

HIGH 7.8

DescriptionCVE.org

An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380. A Use-After-Free in the mobile processor leads to privilege escalation.

AnalysisAI

Use-After-Free (UAF) vulnerability in Samsung's Exynos mobile processors (980, 990, 1080, 2100, 1280, 2200, 1380) that enables local privilege escalation. An authenticated attacker with local access can exploit this memory safety flaw to gain elevated privileges on affected devices. The vulnerability has a CVSS 3.1 score of 7.8 (High), reflecting high impact on confidentiality, integrity, and availability, though exploitation requires local access and existing user-level privileges.

Technical ContextAI

The vulnerability exists in Samsung's Exynos System-on-Chip (SoC) processors, which integrate CPU, GPU, modem, and security subsystems. The root cause is CWE-416 (Use-After-Free), a memory corruption flaw where code attempts to access memory regions after they have been freed, leading to undefined behavior. In the context of mobile processors, this likely affects kernel-space or secure execution environment (TEE) code within the Exynos firmware. The affected CPE range includes Samsung Exynos 980 (Galaxy A51), 990 (Galaxy S20/Z Fold 2), 1080 (Galaxy A71), 2100 (Galaxy S21), 1280 (mid-range), 2200 (Galaxy S22), and 1380 (Galaxy A52/A72). This UAF could occur in interrupt handlers, device drivers, or memory management routines within the processor's firmware stack, potentially exposing privileged execution contexts.

RemediationAI

Immediate actions: (1) Monitor Samsung Security Advisory bulletins for CVE-2025-23098 firmware patches targeting Exynos 980, 990, 1080, 2100, 1280, 2200, 1380 processors. (2) Deploy Over-The-Air (OTA) updates once available; Samsung typically releases monthly or quarterly security updates bundled with other fixes. (3) For enterprise deployments, enforce application sandboxing and SELinux policies to limit local privilege escalation impact if patching is delayed. (4) Restrict sideloading of untrusted apps (require Google Play Protect or enterprise app stores) to reduce attack surface. (5) Mitigations pending patch: disable unknown app installations, use mobile device management (MDM) to enforce app whitelisting, and educate users against phishing/malicious downloads. (6) For affected devices, apply the latest available security patch level; Samsung patches are cumulative. No workaround eliminates the vulnerability; patching is mandatory. Coordinate with carriers (Verizon, AT&T, T-Mobile, etc.) for timely OTA availability.