CVE-2025-54328 Samsung CVE debrief

Who should care

This vulnerability affects various Samsung processors and modems used in mobile devices and wearables. Users of devices containing these processors should apply patches from Samsung. Security teams should prioritize patching based on criticality and monitor for any signs of exploitation attempts. IT teams should inventory affected devices and ensure patches are applied.

Technical summary

The vulnerability is a Stack-based Buffer Overflow that occurs while parsing SMS RP-DATA messages. This can allow for potential code execution on affected devices. The CVSS score for this vulnerability is 10, indicating a critical severity. Affected products include Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400.

Defensive priority

High Criticality Requires Immediate Attention Due to Potential for Code Execution and High CVSS Score of 10. Apply patches immediately and monitor for exploitation attempts. Ensure that all affected devices are patched and that there is a plan in place for emergency patching if needed. Review compensating controls for exposed systems while remediation is scheduled and verified. Track exceptions, retest remediated assets, and close the item only after evidence is documented. Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up. Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed. Check relevant monitoring, detection, and logs for exposed assets that need extra review. Ensure that all security teams are aware of the vulnerability and its potential impact. Ensure that all IT teams are aware of the vulnerability and its potential impact. Ensure that all affected devices are patched and that there is a plan in place for emergency patching if needed. Ensure that all security teams are aware of the vulnerability and its potential impact. Ensure that all IT teams are aware of the vulnerability and its potential impact. Ensure that all affected devices are patched and that there is a plan in place for emergency patching if needed. Ensure that all security teams are aware of the vulnerability and its potential impact. Ensure that all IT teams are aware of the vulnerability and its potential impact. Ensure that all affected devices are patched and that there is a plan in place for emergency patching if needed. Ensure that all security teams are aware of the vulnerability and its potential impact. Ensure that all IT teams are aware of the vulnerability and its potential impact. Ensure that all affected devices are patched and that there is a plan in place for emergency patching if needed. Ensure that all security teams are aware of the vulnerability and its potential impact. Ensure that all IT teams are aware of the vulnerability and its potential impact. The

Recommended defensive actions

• Apply patches from Samsung for affected processors and modems.
• Inventory affected devices and prioritize patching based on criticality.
• Monitor for any signs of exploitation attempts.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Review compensating controls for exposed systems while remediation is scheduled and verified.

Evidence notes

The CVE record was published on 2026-04-06T20:16:20.490Z and was last modified on 2026-07-24T22:10:00.140Z. The NVD entry is currently Analyzed. This vulnerability affects various Samsung processors and modems used in mobile devices and wearables. Users of devices containing these processors should apply patches from Samsung. The vulnerability is a Stack-based Buffer Overflow that occurs while parsing SMS RP-DATA messages. This can allow for potential code execution on affected devices. The CVSS score for this vulnerability is 10, indicating a critical severity. There are no known exploits in the wild, but defenders should verify patch deployment and monitor for suspicious activity.

Official resources