CVE-2025-26782: Input Validation
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service.
Other sources
In cellular modem, there is a possible way to crash the cellular modem due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2025-12-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26782?
CVE-2025-26782 has been classified as a Denial of Service vulnerability, posing significant impact to affected devices.
How do I fix CVE-2025-26782?
To address CVE-2025-26782, users should apply the latest firmware updates provided by Samsung for the affected Exynos driver versions.
Which devices are impacted by CVE-2025-26782?
CVE-2025-26782 affects various Samsung Mobile Processors, Wearable Processors, and Modems including Exynos 980, 990, and several others.
What are the potential risks of CVE-2025-26782?
The exploitation of CVE-2025-26782 can lead to a Denial of Service condition, rendering affected devices inoperable.
Is there a workaround for CVE-2025-26782?
Currently, there is no known workaround for CVE-2025-26782, thus updating the firmware is the recommended action.