CVE-2025-26785 | Vulnetix

CVE-2025-26785 PUBLISHED CVSS 7.5 HIGH

Reported by mitre · Published May 14, 2025

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes.

Risk scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*

Timeline

May 6, 2025 CVE Published
May 14, 2025 Coalition ESS Score (20 in total, the first dated here)
May 14, 2025 PoC Published
May 15, 2025 EPSS Score (30 in total, the first dated here)
Jun 25, 2025 CVE Updated
Jun 2, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2025-26785
vulnetix vdb fixes CVE-2025-26785

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-26785/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →