CVE-2025-54328 - Vulnerability Analysis
CriticalCVSS: 10.0Last Updated: April 6, 2026
Samsung Exynos - Buffer Overflow
Published: April 6, 2026Updated: April 6, 2026Remote Exploitable
Overview
Samsung Mobile Processor, Wearable Processor, and Modem Exynos (various models) contain a stack-based buffer overflow caused by improper parsing of SMS RP-DATA messages, letting attackers cause memory corruption remotely, exploit requires sending crafted SMS messages.
Severity & Score
Severity: Critical
CVSS Score: 10.0
Impact
Attackers can cause memory corruption remotely, potentially leading to denial of service or code execution.
Mitigation
Update to the latest firmware version provided by Samsung.
References
Related Resources
Details
- CVE ID
- CVE-2025-54328
- Severity
- Critical
- CVSS Score
- 10.0
- Type
- buffer_overflow
- Status
- new
CWE
- CWE-121
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H