CVE-2025-66366: vulnerability in Samsung Semiconductor Exynos 1280
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
0Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Track
Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
Affected products
Samsung Semiconductor · Exynos 1280Samsung Semiconductor · Exynos 1330Samsung Semiconductor · Exynos 1380Samsung Semiconductor · Exynos 1480Samsung Semiconductor · Exynos 1580Samsung Semiconductor · Exynos 2400Samsung Semiconductor · Exynos 2500Samsung Semiconductor · Exynos Modem 5300Samsung Semiconductor · Exynos Modem 5400Samsung Semiconductor · Exynos Modem 5410Related CVEs — Samsung Semiconductor Exynos 1280
In the same product, most dangerous first.