CVE-2020-25279: Buffer Overflow

Published Sep 11, 2020

Updated

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The baseband component has a buffer overflow via an abnormal SETUP message, leading to execution of arbitrary code. The Samsung ID is SVE-2020-18098 (September 2020).

Affected Software

4 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Event History

Sep 11, 2020

CVE Published

via MITRE·09:06 PM

Data Sourced

via MITRE·09:06 PM

Description

Aug 10, 2026

Exploit Published

via GitHub·11:44 PM

Frequently Asked Questions

What is the severity of CVE-2020-25279?

CVE-2020-25279 is considered a critical vulnerability as it allows arbitrary code execution due to a buffer overflow.

How do I fix CVE-2020-25279?

To mitigate CVE-2020-25279, update your Samsung device to the latest software version provided by Samsung.

What devices are affected by CVE-2020-25279?

CVE-2020-25279 affects Samsung mobile devices running Android versions 8.0, 8.1, 9.0, and 10.0 on Exynos chipsets.

What exploitation methods are associated with CVE-2020-25279?

CVE-2020-25279 can be exploited through sending an abnormal SETUP message to the affected devices.

Is there a known exploit for CVE-2020-25279?

Yes, CVE-2020-25279 has been documented to allow remote execution of arbitrary code through the vulnerability.