8.8

CVE-2025-23102

An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads to privilege escalation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ Exynos 980 Firmware Version -
   Samsung ≫ Exynos 980 Version -
Samsung ≫ Exynos 990 Firmware Version -
   Samsung ≫ Exynos 990 Version -
Samsung ≫ Exynos 1080 Firmware Version -
   Samsung ≫ Exynos 1080 Version -
Samsung ≫ Exynos 2100 Firmware Version -
   Samsung ≫ Exynos 2100 Version -
Samsung ≫ Exynos 1280 Firmware Version -
   Samsung ≫ Exynos 1280 Version -
Samsung ≫ Exynos 2200 Firmware Version -
   Samsung ≫ Exynos 2200 Version -
Samsung ≫ Exynos 1380 Firmware Version -
   Samsung ≫ Exynos 1380 Version -
Samsung ≫ Exynos 1480 Firmware Version -
   Samsung ≫ Exynos 1480 Version -
Samsung ≫ Exynos 2400 Firmware Version -
   Samsung ≫ Exynos 2400 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.278
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-415 Double Free

The product calls free() twice on the same memory address.

https://semiconductor.samsung.com/support/quality-support/product-security-updates/
Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23102/
Vendor Advisory