Vulnerability Report

CVE-2025-57835

Title: Denial of Service in Samsung Exynos RRC due to Illegal Memory Access

Input Validation Error

Proof Of Concept

No public PoC currently indexed for CVE-2025-57835.

CWE Category NVD-CWE-noinfo

Published Date Apr 06, 2026

Modified Date Apr 07, 2026

Exploit Status Not Found

Score 7.5 CVSS v

Exploit Probability (EPSS)

0.28%

Vulnerability Summary

CVE-2025-57835: An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory access, causing a system crash via a malformed RRCReconfiguration message.

Impacted Vendors

samsung 20

Reference Links

https://semiconductor.samsung.com/support/quality-support/product-security-updates/ https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-57835/

CVSS v3.1

Source Entity 134c704f-9b21-4f2e-91b3-4a467353bcc0

Severity HIGH

7.5

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns