CVE-2025-23102

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-23102

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

A

n issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads to privilege escalation.

References
Link Resource
https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23102/ Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
History

10 Jun 2025, 20:07

Type Values Removed Values Added
First Time Samsung exynos 2200
Samsung exynos 1380 Firmware
Samsung exynos 1280
Samsung exynos 2100 Firmware
Samsung exynos 980 Firmware
Samsung exynos 980
Samsung exynos 2400
Samsung exynos 2100
Samsung exynos 1480
Samsung exynos 1280 Firmware
Samsung exynos 990
Samsung exynos 990 Firmware
Samsung exynos 1480 Firmware
Samsung exynos 2400 Firmware
Samsung exynos 1080
Samsung exynos 1080 Firmware
Samsung exynos 1380
Samsung
Samsung exynos 2200 Firmware
CPE cpe:2.3:h:*:exynos_9820:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1080:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_2100:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_9825_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_9820_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_9825:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_990:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_2200:-:*:*:*:*:*:*:*		 cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*

09 Jun 2025, 14:15

Type Values Removed Values Added
Summary (en) An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, and 1380. A Double Free in the mobile processor leads to privilege escalation. (en) An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads to privilege escalation.

06 Jun 2025, 18:49

Type Values Removed Values Added
CPE cpe:2.3:h:*:exynos_9820:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_2100:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_9825:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_990:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_9825_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_1080:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_9820_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:*:exynos_2100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:*:exynos_2200:-:*:*:*:*:*:*:*
First Time * exynos 1380 Firmware
* exynos 2200
* exynos 2100
* exynos 2100 Firmware
* exynos 9820 Firmware
* exynos 9825
* exynos 1280 Firmware
* exynos 1380
* exynos 2200 Firmware
* exynos 980 Firmware
* exynos 1280
* exynos 990
* exynos 1080 Firmware
* exynos 990 Firmware
*
* exynos 9820
* exynos 1080
* exynos 980
* exynos 9825 Firmware
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23102/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-23102/ - Vendor Advisory

04 Jun 2025, 14:54

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200 y 1380. Una doble liberación en el procesador móvil conduce a una escalada de privilegios.

03 Jun 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-03 19:15

Updated : 2025-06-10 20:07

NVD link : CVE-2025-23102

Mitre link : CVE-2025-23102

CVE.ORG link : CVE-2025-23102

JSON object : View

Products Affected

samsung

CWE
CWE-415

Double Free