{"id":"CVE-2025-27374","aliases":["EUVD-2025-37822","GHSA-xh2h-xr83-rv32"],"status":"published","title":"An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable...","description":"An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00314,"percentile":0.24597,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2025-11-04T00:00:00Z","modified":"2026-11-05T14:10:00Z","products":[{"vendor":"samsung","product":"exynos_1080_firmware"},{"vendor":"samsung","product":"exynos_1280_firmware"},{"vendor":"samsung","product":"exynos_1330_firmware"},{"vendor":"samsung","product":"exynos_1380_firmware"},{"vendor":"samsung","product":"exynos_1480_firmware"},{"vendor":"samsung","product":"exynos_2200_firmware"},{"vendor":"samsung","product":"exynos_2400_firmware"},{"vendor":"samsung","product":"exynos_850_firmware"},{"vendor":"samsung","product":"exynos_980_firmware"},{"vendor":"samsung","product":"exynos_9820_firmware"},{"vendor":"samsung","product":"exynos_9825_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["Vendor Advisory"]},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-27374/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27374"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-27374"},{"url":"https://github.com/advisories/GHSA-xh2h-xr83-rv32"}],"sources":{"cve":[{"id":"CVE-2025-27374","description":"An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.","status":"published","published":"2025-11-04T00:00:00Z","modified":"2025-11-04T21:28:56.141Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:32:42.078906Z"}],"euvd":[{"id":"EUVD-2025-37822","description":"An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.","status":"published","published":"2025-11-04T00:00:00Z","modified":"2025-11-04T21:28:56Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:20.707326Z"}],"ghsa":[{"id":"GHSA-xh2h-xr83-rv32","title":"An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable...","description":"An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.","status":"published","published":"2025-11-04T21:31:36Z","modified":"2025-11-05T00:31:33Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:04:39.50413Z"}],"nvd":[{"id":"CVE-2025-27374","description":"An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.","status":"published","published":"2025-11-04T21:15:36.523Z","modified":"2026-11-05T14:10:00.273Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-05T19:55:51.56159Z"}]}}