CVE-2025-23105

An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

History

13 Jun 2025, 18:08

Type Values Removed Values Added
First Time Samsung exynos 2400 Firmware
Samsung
Samsung exynos 1480 Firmware
Samsung exynos 2400
Samsung exynos 2200
Samsung exynos 2200 Firmware
Samsung exynos 1480
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23105/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23105/ - Vendor Advisory
CPE cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*

04 Jun 2025, 14:54

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en Samsung Mobile Processor Exynos 2200, 1480 y 2400. Un Use-After-Free en el procesador móvil conduce a una escalada de privilegios.

03 Jun 2025, 03:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-276

02 Jun 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-02 19:15

Updated : 2025-06-13 18:08


NVD link : CVE-2025-23105

Mitre link : CVE-2025-23105

CVE.ORG link : CVE-2025-23105


JSON object : View

Products Affected

samsung

  • exynos_2200
  • exynos_1480
  • exynos_1480_firmware
  • exynos_2200_firmware
  • exynos_2400
  • exynos_2400_firmware
CWE
CWE-276

Incorrect Default Permissions