CVE-2025-54329

Summary

CVE	CVE-2025-54329
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2025-11-04 17:16:22 UTC
Updated	2026-11-05 14:10:00 UTC
Description	An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message (including an SMS message) lacks bounds checking, which can lead to a heap overflow.

Risk And Classification

Primary CVSS: v3.1 7.5 HIGH from ADP

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.004140000 probability, percentile 0.358830000 (date 2026-11-05)

Problem Types: CWE-122 | n/a | CWE-122 CWE-122 Heap-based Buffer Overflow

Version	Source	Type	Score	Severity	Vector
3.1	ADP	DECLARED	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Samsung	Exynos 1280	-	All	All	All
Operating System	Samsung	Exynos 1280 Firmware	-	All	All	All
Hardware	Samsung	Exynos 1330	-	All	All	All
Operating System	Samsung	Exynos 1330 Firmware	-	All	All	All
Hardware	Samsung	Exynos 1380	-	All	All	All
Operating System	Samsung	Exynos 1380 Firmware	-	All	All	All
Hardware	Samsung	Exynos 1480	-	All	All	All
Operating System	Samsung	Exynos 1480 Firmware	-	All	All	All
Hardware	Samsung	Exynos 1580	-	All	All	All
Operating System	Samsung	Exynos 1580 Firmware	-	All	All	All
Hardware	Samsung	Exynos 2100	-	All	All	All
Operating System	Samsung	Exynos 2100 Firmware	-	All	All	All
Hardware	Samsung	Exynos 2200	-	All	All	All
Operating System	Samsung	Exynos 2200 Firmware	-	All	All	All
Hardware	Samsung	Exynos 2400	-	All	All	All
Operating System	Samsung	Exynos 2400 Firmware	-	All	All	All
Hardware	Samsung	Exynos 2500	-	All	All	All
Operating System	Samsung	Exynos 2500 Firmware	-	All	All	All
Hardware	Samsung	Exynos 850	-	All	All	All
Operating System	Samsung	Exynos 850 Firmware	-	All	All	All
Hardware	Samsung	Exynos 980	-	All	All	All
Operating System	Samsung	Exynos 980 Firmware	-	All	All	All
Hardware	Samsung	Exynos 990	-	All	All	All
Operating System	Samsung	Exynos 990 Firmware	-	All	All	All
Hardware	Samsung	Exynos W1000	-	All	All	All
Operating System	Samsung	Exynos W1000 Firmware	-	All	All	All
Hardware	Samsung	Exynos W920	-	All	All	All
Operating System	Samsung	Exynos W920 Firmware	-	All	All	All
Hardware	Samsung	Exynos W930	-	All	All	All
Operating System	Samsung	Exynos W930 Firmware	-	All	All	All
Hardware	Samsung	Modem 5123	-	All	All	All
Operating System	Samsung	Modem 5123 Firmware	-	All	All	All
Hardware	Samsung	Modem 5300	-	All	All	All
Operating System	Samsung	Modem 5300 Firmware	-	All	All	All
Hardware	Samsung	Modem 5400	-	All	All	All
Operating System	Samsung	Modem 5400 Firmware	-	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54329	[email protected]	semiconductor.samsung.com	Vendor Advisory
semiconductor.samsung.com/support/quality-support/product-security-updates	[email protected]	semiconductor.samsung.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.