CVE-2025-53966

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message.

CVSS 3.1

8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-26)

CWE

CWE-120

Published

2026-01-05

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

Affected

• samsung:exynos_1380_firmware
• samsung:exynos_1480_firmware
• samsung:exynos_1580_firmware
• samsung:exynos_2400_firmware

References

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-53966/

Check your stackJSON