PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-58349 Samsung CVE debrief

A critical vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos series, including Exynos 980, 990, 850, and others. The issue causes baseband crashes due to incorrect handling of LTE MAC packets with many MAC Control Elements (CEs). This vulnerability could be used to disrupt cellular connectivity, potentially impacting business operations and device security. Organizations should prioritize patching and monitor for unusual activity.

Vendor
Samsung
Product
Exynos series (Mobile Processor, Wearable Processor, Modem)
CVSS
CRITICAL 9.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-06
Original CVE updated
2026-07-24
Advisory published
2026-04-06
Advisory updated
2026-07-24

Who should care

Organizations using Samsung devices with affected Exynos chipsets should prioritize patching. This vulnerability could be used to disrupt cellular connectivity, potentially impacting business operations and device security. Security teams, IT administrators, and network operators should be aware of this vulnerability and take necessary precautions.

Technical summary

The vulnerability is caused by incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) in Samsung Mobile Processor, Wearable Processor, and Modem Exynos series. This leads to baseband crashes. The affected products include Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The vulnerability has a CVSS score of 9.1 and is considered critical.

Defensive priority

High

Recommended defensive actions

  • Apply patches from Samsung as soon as available
  • Inventory affected devices and prioritize patching
  • Monitor for unusual baseband crashes
  • Implement compensating controls like network traffic monitoring
  • Review and update incident response plans
  • Conduct vulnerability assessments
  • Verify patch application and configuration

Evidence notes

The CVE record was published on 2026-04-06T19:16:26.157Z and was last modified on 2026-07-24T22:10:00.140Z. The NVD entry is currently Analyzed. This information is based on the NVD entry and the CVE record. The vulnerability affects various Samsung Mobile Processor, Wearable Processor, and Modem Exynos series. Evidence of exploitation is not currently available, but defenders should verify patch application and monitor for unusual baseband crashes.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-04-06T19:16:26.157Z and has not been modified since then. The NVD entry is currently Analyzed.