CVE-2025-26780
BaseFortify
Publication date: 2025-07-07
Last updated on: 2025-10-27
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | exynos_2400_firmware | * |
| samsung | exynos_2400 | * |
| samsung | modem_5400_firmware | * |
| samsung | modem_5400 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the L2 subsystem of Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400. It is caused by a lack of length checking in the processing of PDCP packets, which can be exploited by sending a malformed PDCP packet. This leads to a Denial of Service (DoS) condition, meaning the affected components can be made to stop functioning properly. [1]
How can this vulnerability impact me? :
The vulnerability can cause a Denial of Service (DoS) on devices using the affected Samsung Exynos 2400 and Modem 5400 components. This means that an attacker could disrupt normal operation of the device's communication capabilities, potentially causing loss of connectivity or device instability. [1]