Dashboard / CVE-2025-27374

CVE-2025-27374

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 71/100
Published: 2025-11-04 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: Low

Description

An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.

Weakness Classification (1)

Affected Software (11)

VendorProductVersion
samsung exynos_1080_firmware -
samsung exynos_1280_firmware -
samsung exynos_1330_firmware -
samsung exynos_1380_firmware -
samsung exynos_1480_firmware -
samsung exynos_2200_firmware -
samsung exynos_2400_firmware -
samsung exynos_850_firmware -
samsung exynos_980_firmware -
samsung exynos_9820_firmware -
samsung exynos_9825_firmware -

References & Advisories (2)

Bug Bounty Relevance

71 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS — Exploitation Probability

0.31%
Raw Score 0.003140
Percentile 24.7%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00314
2026-11-13
0.00314
2026-11-12
0.00314
2026-11-10
0.00314
2026-11-09
0.00314
2026-11-08
0.00314
2026-11-07
0.00314
2026-11-06
0.00314
2026-11-05
0.00314

Intelligence Sources

nvd ref →

External Links