PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-58349 Samsung CVE debrief

A critical vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos series, including Exynos 980, 990, 850, and others. The issue causes baseband crashes due to incorrect handling of LTE MAC packets with many MAC Control Elements (CEs). This vulnerability could be used to disrupt cellular connectivity, potentially impacting business operations and device security. Organizations should prioritize patching and monitor for unusual activity.

Vendor
Samsung
Product
Exynos series (Mobile Processor, Wearable Processor, Modem)
CVSS
CRITICAL 9.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-06
Original CVE updated
2026-07-24
Advisory published
2026-04-06
Advisory updated
2026-07-24

Who should care

Organizations using Samsung devices with affected Exynos chipsets should prioritize patching. This vulnerability could be used to disrupt cellular connectivity, potentially impacting business operations and device security. Security teams, IT administrators, and network operators should be aware of this vulnerability and take necessary precautions.

Technical summary

The vulnerability is caused by incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) in Samsung Mobile Processor, Wearable Processor, and Modem Exynos series. This leads to baseband crashes. The affected products include Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The vulnerability has a CVSS score of 9.1 and is considered critical.

Defensive priority

High

Recommended defensive actions

  • Apply patches from Samsung as soon as available
  • Inventory affected devices and prioritize patching
  • Monitor for unusual baseband crashes
  • Implement compensating controls like network traffic monitoring
  • Review and update incident response plans
  • Conduct vulnerability assessments
  • Verify patch application and configuration

Evidence notes

The CVE record was published on 2026-04-06T19:16:26.157Z and was last modified on 2026-07-24T22:10:00.140Z. The NVD entry is currently Analyzed. This information is based on the NVD entry and the CVE record. The vulnerability affects various Samsung Mobile Processor, Wearable Processor, and Modem Exynos series. Evidence of exploitation is not currently available, but defenders should verify patch application and monitor for unusual baseband crashes.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-58349 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-58349

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-58349 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-58349

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.