CVE-2025-23106

An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

History

11 Jun 2025, 18:54

Type Values Removed Values Added
First Time Samsung exynos 1480 Firmware
Samsung exynos 2200 Firmware
Samsung exynos 2200
Samsung exynos 2400 Firmware
Samsung exynos 2400
Samsung
Samsung exynos 1480
CPE cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23106/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23106/ - Vendor Advisory

05 Jun 2025, 20:12

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en Samsung Mobile Processor Exynos 2200, 1480 y 2400. Un Use-After-Free en el procesador móvil conduce a una escalada de privilegios.

04 Jun 2025, 21:15

Type Values Removed Values Added
CWE CWE-416
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5

04 Jun 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-04 16:15

Updated : 2025-06-11 18:54


NVD link : CVE-2025-23106

Mitre link : CVE-2025-23106

CVE.ORG link : CVE-2025-23106


JSON object : View

Products Affected

samsung

  • exynos_2200_firmware
  • exynos_2400_firmware
  • exynos_1480_firmware
  • exynos_2400
  • exynos_1480
  • exynos_2200
CWE
CWE-416

Use After Free