Description

An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an NL80211 vendor command leads to a buffer overflow.

Related CPE's

o

samsung

exynos_1380_firmware

-

Vulnerable

h

samsung

exynos_1380

-

o

samsung

exynos_1480_firmware

-

Vulnerable

h

samsung

exynos_1480

-

o

samsung

exynos_1580_firmware

-

Vulnerable

h

samsung

exynos_1580

-

o

samsung

exynos_2400_firmware

-

Vulnerable

h

samsung

exynos_2400

-

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-49495/

Vendor Advisory

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary
CWE-120

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-05T19:15:56.193Z

4 days ago

Last modified

2026-01-09T14:14:30.647Z

28 hours ago