BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-07

Assigner: MITRE

Description

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 9110, Modem 5123. Mishandling of an 5G NRMM packet leads to a Denial of Service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-11-07

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-49494

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	modem_5123_firmware	*
samsung	modem_5123	*
samsung	exynos_1280_firmware	*
samsung	exynos_1280	*
samsung	exynos_1380_firmware	*
samsung	exynos_1380	*
samsung	exynos_1330_firmware	*
samsung	exynos_1330	*
samsung	exynos_1480_firmware	*
samsung	exynos_1480	*
samsung	exynos_2100_firmware	*
samsung	exynos_2100	*
samsung	exynos_9110_firmware	*
samsung	exynos_9110	*
samsung	exynos_2200_firmware	*
samsung	exynos_2200	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a flaw in Samsung Mobile Processor, Wearable Processor, and Modem where improper handling of a 5G NRMM (New Radio Mobility Management) packet can cause a Denial of Service (DoS). Essentially, the device may crash or become unresponsive when processing certain 5G network management packets.

Impact Analysis

The impact of this vulnerability is a Denial of Service, meaning affected devices could become unresponsive or crash when receiving specially crafted 5G NRMM packets. This could disrupt normal device operation and connectivity.

Hi! I’m here to help you understand CVE-2025-49494. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70