CVE-2025-58343

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/create_tspec write operation, leading to kernel memory exhaustion.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2026-02-03

Last modified

2026-02-09

Weaknesses

CWE-770

Affected products

• Exynos 1080 Firmware (Samsung)
• Exynos 1280 Firmware (Samsung)
• Exynos 1330 Firmware (Samsung)
• Exynos 1380 Firmware (Samsung)
• Exynos 1480 Firmware (Samsung)
• Exynos 1580 Firmware (Samsung)
• Exynos 850 Firmware (Samsung)
• Exynos 980 Firmware (Samsung)
• Exynos W1000 Firmware (Samsung)
• Exynos W920 Firmware (Samsung)
• Exynos W930 Firmware (Samsung)

References

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-58343/