CVE-2025-54328
CRITICAL 10.0EPSS 0.5%
An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.
- CVSS v3.1 CNA
- 10.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 0.52% chance of exploitation in the next 30 days, 43rd percentile
- Published
- 2026-04-06
Proof-of-concept exploits (1)
- Hunt-Benito/samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband…1★ · 2026-06-21
Security advisories
- https://semiconductor.samsung.com/support/quality-support/product-security-updates
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-20…