CVE-2025-43706
Summary
| CVE | CVE-2025-43706 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-01-05 19:15:56 UTC |
| Updated | 2026-11-04 22:10:00 UTC |
| Description | An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2400, 1580, 9110, W920, W930, Modem 5123, and Modem 5400. Incorrect handling of RRC packets leads to a Denial of Service. |
Risk And Classification
Primary CVSS: v3.1 7.5 HIGH from ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.003310000 probability, percentile 0.263850000 (date 2026-11-04)
Problem Types: CWE-400 | n/a | CWE-400 CWE-400 Uncontrolled Resource Consumption
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | DECLARED | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Samsung | Exynos 1080 | - | All | All | All |
| Operating System | Samsung | Exynos 1080 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 1580 | - | All | All | All |
| Operating System | Samsung | Exynos 1580 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 2400 | - | All | All | All |
| Operating System | Samsung | Exynos 2400 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 850 | - | All | All | All |
| Operating System | Samsung | Exynos 850 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 9110 | - | All | All | All |
| Operating System | Samsung | Exynos 9110 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 980 | - | All | All | All |
| Operating System | Samsung | Exynos 980 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 990 | - | All | All | All |
| Operating System | Samsung | Exynos 990 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos W920 | - | All | All | All |
| Operating System | Samsung | Exynos W920 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos W930 | - | All | All | All |
| Operating System | Samsung | Exynos W930 Firmware | - | All | All | All |
| Hardware | Samsung | Modem 5123 | - | All | All | All |
| Operating System | Samsung | Modem 5123 Firmware | - | All | All | All |
| Hardware | Samsung | Modem 5400 | - | All | All | All |
| Operating System | Samsung | Modem 5400 Firmware | - | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-43706 | [email protected] | semiconductor.samsung.com | Vendor Advisory |
| semiconductor.samsung.com/support/quality-support/product-security-updates | [email protected] | semiconductor.samsung.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.