{"id":"CVE-2025-59440","aliases":["EUVD-2025-209239","GHSA-pp8m-48hh-xvpx"],"status":"published","title":"An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...","description":"An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00289,"percentile":0.21647,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2026-04-06T00:00:00Z","modified":"2026-10-24T13:10:00Z","products":[{"vendor":"samsung","product":"exynos_1080_firmware"},{"vendor":"samsung","product":"exynos_1280_firmware"},{"vendor":"samsung","product":"exynos_1330_firmware"},{"vendor":"samsung","product":"exynos_1380_firmware"},{"vendor":"samsung","product":"exynos_1480_firmware"},{"vendor":"samsung","product":"exynos_1580_firmware"},{"vendor":"samsung","product":"exynos_2100_firmware"},{"vendor":"samsung","product":"exynos_2200_firmware"},{"vendor":"samsung","product":"exynos_2400_firmware"},{"vendor":"samsung","product":"exynos_2500_firmware"},{"vendor":"samsung","product":"exynos_850_firmware"},{"vendor":"samsung","product":"exynos_9110_firmware"},{"vendor":"samsung","product":"exynos_980_firmware"},{"vendor":"samsung","product":"exynos_990_firmware"},{"vendor":"samsung","product":"exynos_modem_5123_firmware"},{"vendor":"samsung","product":"exynos_modem_5300_firmware"},{"vendor":"samsung","product":"exynos_modem_5400_firmware"},{"vendor":"samsung","product":"exynos_w1000_firmware"},{"vendor":"samsung","product":"exynos_w920_firmware"},{"vendor":"samsung","product":"exynos_w930_firmware"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["Vendor Advisory"]},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-59440/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59440"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates"},{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-59440"},{"url":"https://github.com/advisories/GHSA-pp8m-48hh-xvpx"}],"sources":{"cve":[{"id":"CVE-2025-59440","description":"An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.","status":"published","published":"2026-04-06T00:00:00Z","modified":"2026-04-07T13:55:03.583Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:32:48.167635Z"}],"euvd":[{"id":"EUVD-2025-209239","description":"An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.","status":"published","published":"2026-04-06T00:00:00Z","modified":"2026-04-07T13:55:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:14.820353Z"}],"ghsa":[{"id":"GHSA-pp8m-48hh-xvpx","title":"An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...","description":"An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.","status":"published","published":"2026-04-06T18:33:09Z","modified":"2026-04-07T15:30:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:07:11.075264Z"}],"nvd":[{"id":"CVE-2025-59440","description":"An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.","status":"published","published":"2026-04-06T18:16:40.937Z","modified":"2026-10-24T13:10:00.147Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:12:01.641503Z"}]}}