CVE-2025-52908

Buffer Overflow in Samsung Exynos Wi‑Fi Driver

View on CVE.org
Published Apr 7, 2026 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Description
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 1 of 2.

Analysis

AI-generated

Technical impact

An incorrect processing of an NL80211 vendor command in the Wi‑Fi driver of several Samsung Exynos processors creates a buffer overflow. The flaw, classified as CWE‑120, can corrupt memory when an attacker sends a crafted ioctl message. If successfully exploited, an attacker could achieve arbitrary code execution, compromising the confidentiality, integrity, or availability of the affected device.

Affected Systems

The vulnerability affects Samsung mobile and wearable processors including the Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, as well as their associated firmware. No specific version ranges are supplied, implying all current releases are potentially susceptible until a patch is applied.

Risk and Exploitability

With a CVSS score of 9.8, the flaw is high severity. However, the EPSS score of less than 1% suggests it is not widely exploited yet, and it is not listed in CISA’s KEV catalog. Exploitation would likely need a local attacker to send a malicious NL80211 vendor command to the Wi‑Fi driver via ioctl. Given the potential impact, the issue should be treated as a high‑risk problem.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the device firmware to the latest Samsung security release that addresses CVE‑2025‑52908.
  • Verify the firmware update by comparing the version number against Samsung’s release notes.
  • If a firmware update is unavailable, disable Wi‑Fi or isolate the device from the network until a patch is released.

Generated by OpenCVE AI on April 10, 2026 at 11:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Buffer Overflow in Samsung Exynos Wi‑Fi Driver
Type Values Removed Values Added
Title Buffer Overflow in Samsung Exynos Wi‑Fi Driver via NL80211 Vendor Command
Weaknesses CWE-119
Type Values Removed Values Added
First Time appeared Samsung exynos 1280
Samsung exynos 1280 Firmware
Samsung exynos 1330
Samsung exynos 1330 Firmware
Samsung exynos 1380
Samsung exynos 1380 Firmware
Samsung exynos 1480
Samsung exynos 1480 Firmware
Samsung exynos 1580
Samsung exynos 1580 Firmware
Samsung exynos 850
Samsung exynos 850 Firmware
Samsung exynos 980
Samsung exynos 980 Firmware
Samsung exynos W1000
Samsung exynos W1000 Firmware
Samsung exynos W920
Samsung exynos W920 Firmware
Samsung exynos W930
Samsung exynos W930 Firmware
CPEs cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1330:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1580:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_w1000:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_w930:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1580_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_w1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_w930_firmware:-:*:*:*:*:*:*:*
Vendors & Products Samsung exynos 1280
Samsung exynos 1280 Firmware
Samsung exynos 1330
Samsung exynos 1330 Firmware
Samsung exynos 1380
Samsung exynos 1380 Firmware
Samsung exynos 1480
Samsung exynos 1480 Firmware
Samsung exynos 1580
Samsung exynos 1580 Firmware
Samsung exynos 850
Samsung exynos 850 Firmware
Samsung exynos 980
Samsung exynos 980 Firmware
Samsung exynos W1000
Samsung exynos W1000 Firmware
Samsung exynos W920
Samsung exynos W920 Firmware
Samsung exynos W930
Samsung exynos W930 Firmware
Type Values Removed Values Added
Weaknesses CWE-120
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Samsung
Samsung exynos
Vendors & Products Samsung
Samsung exynos
Type Values Removed Values Added
Title Buffer Overflow in Samsung Exynos Wi‑Fi Driver via NL80211 Vendor Command
Weaknesses CWE-119
Type Values Removed Values Added
Description An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 1 of 2.
References
Earlier changes (2)
Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Apr 9, 2026, 1:53 PM
Reserved
Jun 21, 2025, 12:00 AM

View source JSON

Updated
Apr 9, 2026, 1:53 PM

JSON

Status
Analyzed
Published
Apr 7, 2026, 4:16 PM
Modified
Nov 4, 2026, 10:10 PM

View source JSON

No data.

Updated
Apr 13, 2026, 2:27 PM

JSON