CVE-2025-23106

An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

History

11 Jun 2025, 18:54

Type Values Removed Values Added
CPE cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23106/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23106/ - Vendor Advisory
First Time Samsung exynos 2400 Firmware
Samsung
Samsung exynos 1480 Firmware
Samsung exynos 2400
Samsung exynos 2200
Samsung exynos 2200 Firmware
Samsung exynos 1480

05 Jun 2025, 20:12

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en Samsung Mobile Processor Exynos 2200, 1480 y 2400. Un Use-After-Free en el procesador móvil conduce a una escalada de privilegios.

04 Jun 2025, 21:15

Type Values Removed Values Added
CWE CWE-416
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5

04 Jun 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-04 16:15

Updated : 2025-06-11 18:54


NVD link : CVE-2025-23106

Mitre link : CVE-2025-23106

CVE.ORG link : CVE-2025-23106


JSON object : View

Products Affected

samsung

  • exynos_2200
  • exynos_1480
  • exynos_1480_firmware
  • exynos_2200_firmware
  • exynos_2400
  • exynos_2400_firmware
CWE
CWE-416

Use After Free