CVE-2025-27374: Medium severity Samsung Exynos vulnerability
An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27374?
The severity of CVE-2025-27374 has been categorized as high due to the potential for out-of-bounds writes affecting Secure Boot functionality.
How do I fix CVE-2025-27374?
To fix CVE-2025-27374, update your Samsung device to the latest firmware provided by Samsung addressing this vulnerability.
Which devices are affected by CVE-2025-27374?
CVE-2025-27374 affects various Samsung Mobile and Wearable Processors including Exynos 9820, 9825, 980, 990, and others up to version 2400.
What are the potential risks of CVE-2025-27374?
The risks of CVE-2025-27374 include possible unauthorized access to the device and compromise of Secure Boot integrity.
Has CVE-2025-27374 been exploited in the wild?
As of now, there are no public reports indicating that CVE-2025-27374 has been actively exploited in the wild.