MEDIUM · 5.3

CVE-2025-27374

An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length...

Vulnerability Description

An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
SamsungExynos 9825 Firmware-
SamsungExynos 9825-
SamsungExynos 9820 Firmware-
SamsungExynos 9820-
SamsungExynos 980 Firmware-
SamsungExynos 980-
SamsungExynos 850 Firmware-
SamsungExynos 850-
SamsungExynos 2400 Firmware-
SamsungExynos 2400-
SamsungExynos 1480 Firmware-
SamsungExynos 1480-
SamsungExynos 1380 Firmware-
SamsungExynos 1380-
SamsungExynos 1330 Firmware-
SamsungExynos 1330-
SamsungExynos 2200 Firmware-
SamsungExynos 2200-
SamsungExynos 1280 Firmware-
SamsungExynos 1280-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-27374?

CVE-2025-27374 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length...

How severe is CVE-2025-27374?

CVE-2025-27374 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-27374?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Exynos 9825 Firmware, Samsung Exynos 9825, Samsung Exynos 9820 Firmware, Samsung Exynos 9820, Samsung Exynos 980 Firmware.