Main Vulnerability Database Vulnerabilities #VU110004

Double free in Samsung products - CVE-2025-23095

Published: June 2, 2025

Vulnerability identifier: #VU110004

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-23095

CWE-ID: CWE-415

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to a boundary error in the mobile processor. A remote attacker can trigger double free error and gain elevated privileges on the target system.

Affected software

Exynos 1280
Exynos 2200
Exynos 1380
Exynos 1480
Exynos 2400

How to mitigate CVE-2025-23095

Install updates from vendor's website.

External References

https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2025-23095/

Related Security Bulletins