{"id":"CVE-2025-26784","aliases":["A-394084168","EUVD-2025-14941","GHSA-5r36-pxhw-fw6j","PUB-A-394084168"],"status":"published","title":"An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...","description":"An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00283,"percentile":0.20932,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2025-05-14T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2025-08-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2025-08-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"samsung","product":"exynos_1080_firmware"},{"vendor":"samsung","product":"exynos_1280_firmware"},{"vendor":"samsung","product":"exynos_1330_firmware"},{"vendor":"samsung","product":"exynos_1380_firmware"},{"vendor":"samsung","product":"exynos_1480_firmware"},{"vendor":"samsung","product":"exynos_2100_firmware"},{"vendor":"samsung","product":"exynos_2200_firmware"},{"vendor":"samsung","product":"exynos_2400_firmware"},{"vendor":"samsung","product":"exynos_850_firmware"},{"vendor":"samsung","product":"exynos_9110_firmware"},{"vendor":"samsung","product":"exynos_980_firmware"},{"vendor":"samsung","product":"exynos_990_firmware"},{"vendor":"samsung","product":"exynos_modem_5123_firmware"},{"vendor":"samsung","product":"exynos_modem_5300_firmware"},{"vendor":"samsung","product":"exynos_w1000_firmware"},{"vendor":"samsung","product":"exynos_w920_firmware"},{"vendor":"samsung","product":"exynos_w930_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["Vendor Advisory"]},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-26784/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26784"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-26784"},{"url":"https://github.com/advisories/GHSA-5r36-pxhw-fw6j"},{"url":"https://source.android.com/security/bulletin/2025-08-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-26784","description":"An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes.","status":"published","published":"2025-05-14T00:00:00Z","modified":"2025-05-19T18:08:01.108Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:32:28.250136Z"}],"euvd":[{"id":"EUVD-2025-14941","description":"An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes.","status":"published","published":"2025-05-14T00:00:00Z","modified":"2025-05-19T18:08:01Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:43.763029Z"}],"ghsa":[{"id":"GHSA-5r36-pxhw-fw6j","title":"An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...","description":"An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The lack of a length check leads to out-of-bounds writes.","status":"published","published":"2025-05-14T18:30:47Z","modified":"2025-05-19T18:31:47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:02:21.433827Z"}],"nvd":[{"id":"CVE-2025-26784","description":"An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes.","status":"published","published":"2025-05-14T17:15:47.697Z","modified":"2026-06-17T09:02:25.897Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:11:08.321805Z"}],"osv":[{"id":"PUB-A-394084168","description":"In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2025-08-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:17.76362Z"}]}}