Vulnerability Report

CVE-2025-27807

Title: Out-of-bounds writes via malformed NAS packets due to lack of length check

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2025-27807.

CWE Category NVD-CWE-noinfo

Published Date Jan 05, 2026

Modified Date Jan 09, 2026

Exploit Status Not Found

Score 9.1 CVSS v

Exploit Probability (EPSS)

0.31%

Vulnerability Summary

CVE-2025-27807: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes via malformed NAS packets.

Impacted Vendors

samsung 19

Reference Links

https://semiconductor.samsung.com/support/quality-support/product-security-updates/ https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-27807/

CVSS v3.1

Source Entity 134c704f-9b21-4f2e-91b3-4a467353bcc0

Severity CRITICAL

9.1

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns