CVE-2025-43706
BaseFortify
Publication date: 2026-01-05
Last updated on: 2026-01-09
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | exynos_1080_firmware | * |
| samsung | exynos_1080 | * |
| samsung | exynos_1580_firmware | * |
| samsung | exynos_1580 | * |
| samsung | exynos_980_firmware | * |
| samsung | exynos_980 | * |
| samsung | exynos_990_firmware | * |
| samsung | exynos_990 | * |
| samsung | exynos_9110_firmware | * |
| samsung | exynos_9110 | * |
| samsung | exynos_850_firmware | * |
| samsung | exynos_850 | * |
| samsung | exynos_2400_firmware | * |
| samsung | exynos_2400 | * |
| samsung | exynos_w930_firmware | * |
| samsung | exynos_w930 | * |
| samsung | exynos_w920_firmware | * |
| samsung | exynos_w920 | * |
| samsung | modem_5123_firmware | * |
| samsung | modem_5123 | * |
| samsung | modem_5400_firmware | * |
| samsung | modem_5400 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-400 | The product does not properly control the allocation and maintenance of a limited resource. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves incorrect handling of Radio Resource Control (RRC) packets in the L2 component of several Samsung Exynos processors and modems. This flaw can cause a Denial of Service (DoS) condition, meaning the affected device or component may become unavailable or unresponsive due to this issue. [1]
What immediate steps should I take to mitigate this vulnerability?
No specific mitigation steps or patched versions are provided in the available resources. Immediate steps cannot be suggested based on the provided information. [1]
How can this vulnerability impact me? :
The vulnerability can lead to a Denial of Service (DoS) condition on devices using the affected Samsung Exynos processors and modems. This means your device could become unresponsive or fail to operate correctly, potentially disrupting normal functionality and connectivity. [1]