CVE-2025-52909
Received Received - Intake
Buffer Overflow in Samsung Exynos Wi-Fi Driver via NL80211 ioctl

Publication date: 2026-04-07

Last updated on: 2026-04-13

Assigner: MITRE

Description
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 2 of 2.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-07
Last Modified
2026-04-13
Generated
2026-06-16
AI Q&A
2026-04-07
EPSS Evaluated
2026-06-15
NVD
CVE-2025-52909
EUVD
EUVD-2025-209267
Affected Vendors & Products
Showing 10 associated CPEs
Vendor Product Version / Range
samsung exynos_1280_firmware *
samsung exynos_1330_firmware *
samsung exynos_1380_firmware *
samsung exynos_1480_firmware *
samsung exynos_1580_firmware *
samsung exynos_850_firmware *
samsung exynos_980_firmware *
samsung exynos_w930_firmware *
samsung exynos_w920_firmware *
samsung exynos_w1000_firmware *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-52909 is a high-severity vulnerability in the Samsung Exynos WiFi drivers for several SoC models. It is caused by incorrect handling of the NL80211 vendor command, which leads to a buffer overflow condition.

This buffer overflow occurs when processing a certain ioctl message, allowing an attacker to exploit the malformed vendor command.

Impact Analysis

The buffer overflow vulnerability could allow an attacker to execute arbitrary code on the affected device or cause a denial of service.

This means an attacker might gain control over the device or disrupt its normal operation by exploiting the flaw in the WiFi driver's handling of vendor commands.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-52909. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart