Main Vulnerability Database Vulnerabilities #VU110005

Double free in Samsung products - CVE-2025-23096

Published: June 2, 2025

Vulnerability identifier: #VU110005

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-23096

CWE-ID: CWE-415

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to a boundary error in the mobile processor. A remote attacker can trigger double free error and gain elevated privileges on the target system.

Affected software

Exynos 1280
Exynos 2200
Exynos 1380
Exynos 1480
Exynos 2400

How to mitigate CVE-2025-23096

Install updates from vendor's website.

External References

https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2025-23096/

Related Security Bulletins