# Samsung Exynos 2500 vulnerabilities

Source: https://junglewise.ai/threats/technologies/exynos-2500  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/exynos-2500.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 27 vulnerabilities in Samsung Exynos 2500: 0 in the last 7 days and 13 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-33970, was published on 14 September 2026. Nothing in the last four weeks, down from 13 vulnerabilities in the four before.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 13
- All time: 27 (3 critical, 0 exploited in the wild)

## About Samsung Exynos 2500

System-on-chip designed by Samsung for mobile devices.

## Latest Samsung Exynos 2500 vulnerabilities

- [CVE-2026-33970: Samsung Exynos 5G baseband NULL pointer dereference in RRC Reconfiguration](https://junglewise.ai/threats/cve-2026-33970-samsung-exynos-5g-baseband-null-pointer-dereference-in-rrc) (low, CVSS 3.5, published 14 Sep 2026)
- [CVE-2026-33968: Samsung Exynos camera driver TOCTOU race condition](https://junglewise.ai/threats/cve-2026-33968-samsung-exynos-camera-driver-toctou-race-condition) (low, CVSS 2.8, published 14 Sep 2026)
- [CVE-2026-33967: Samsung Exynos camera driver out-of-bounds array access](https://junglewise.ai/threats/cve-2026-33967-samsung-exynos-camera-driver-out-of-bounds-array-access) (low, CVSS 2.8, published 14 Sep 2026)
- [CVE-2026-33966: Samsung Exynos camera driver information leak via debug code](https://junglewise.ai/threats/cve-2026-33966-samsung-exynos-camera-driver-information-leak-via-debug-code) (low, CVSS 2.8, published 14 Sep 2026)
- [CVE-2026-33964: Samsung Exynos untrusted pointer dereference in camera driver](https://junglewise.ai/threats/cve-2026-33964-samsung-exynos-untrusted-pointer-dereference-in-camera-driver) (medium, CVSS 6.4, published 14 Sep 2026)
- [CVE-2026-33963: Samsung Exynos camera driver stack buffer overflow](https://junglewise.ai/threats/cve-2026-33963-samsung-exynos-camera-driver-stack-buffer-overflow) (high, CVSS 7.5, published 14 Sep 2026)
- [CVE-2026-33956: Samsung Exynos mobile processor out-of-bounds write in camera driver](https://junglewise.ai/threats/cve-2026-33956-samsung-exynos-mobile-processor-out-of-bounds-write-in-camera) (low, CVSS 2.8, published 14 Sep 2026)
- [CVE-2026-23792: Samsung Exynos RRC baseband denial of service via unauthenticated RRC Setup](https://junglewise.ai/threats/cve-2026-23792-samsung-exynos-rrc-baseband-denial-of-service-via-unauthenticated) (medium, CVSS 4, published 14 Sep 2026)
- [CVE-2026-23791: Samsung Exynos DPU out-of-bounds write in color mode LUT parsing](https://junglewise.ai/threats/cve-2026-23791-samsung-exynos-dpu-out-of-bounds-write-in-color-mode-lut-parsing) (medium, CVSS 4.2, published 14 Sep 2026)
- [CVE-2026-23790: Samsung Exynos DPU double-free vulnerability](https://junglewise.ai/threats/cve-2026-23790-samsung-exynos-dpu-double-free-vulnerability) (medium, CVSS 4.2, published 14 Sep 2026)
- [CVE-2026-23789: Samsung Exynos MFC double-free in encoder driver](https://junglewise.ai/threats/cve-2026-23789-samsung-exynos-mfc-double-free-in-encoder-driver) (high, CVSS 7.8, published 14 Sep 2026)
- [CVE-2026-23787: Samsung Exynos DRM HDR use-after-free in DPU](https://junglewise.ai/threats/cve-2026-23787-samsung-exynos-drm-hdr-use-after-free-in-dpu) (medium, CVSS 4.2, published 14 Sep 2026)
- [CVE-2026-23786: Samsung Exynos DRM HDR Driver race condition in DPU](https://junglewise.ai/threats/cve-2026-23786-samsung-exynos-drm-hdr-driver-race-condition-in-dpu) (low, CVSS 2.8, published 14 Sep 2026)
- [CVE-2025-62818: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100…](https://junglewise.ai/threats/cve-2025-62818-an-issue-was-discovered-in-samsung-mobile-processor-wearable) (critical, CVSS 9.8, published 7 Apr 2026)
- [CVE-2025-57834: Samsung Exynos Processors and Modems denial of service via improper input validation](https://junglewise.ai/threats/cve-2025-57834-samsung-exynos-processors-and-modems-denial-of-service-via) (high, CVSS 7.5, published 6 Apr 2026)
- [CVE-2025-54328: Samsung Exynos stack buffer overflow in SMS RP-DATA parsing](https://junglewise.ai/threats/cve-2025-54328-samsung-exynos-stack-buffer-overflow-in-sms-rp-data-parsing) (critical, CVSS 10, published 6 Apr 2026)
- [CVE-2025-58349: Samsung Exynos Modem denial of service in L2 component](https://junglewise.ai/threats/cve-2025-58349-samsung-exynos-modem-denial-of-service-in-l2-component) (critical, CVSS 9.1, published 6 Apr 2026)
- [CVE-2025-54324: Samsung Exynos Modem denial of service in NAS layer](https://junglewise.ai/threats/cve-2025-54324-samsung-exynos-modem-denial-of-service-in-nas-layer) (high, CVSS 7.5, published 6 Apr 2026)
- [CVE-2025-59440: An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080…](https://junglewise.ai/threats/cve-2025-59440-an-issue-was-discovered-in-usim-in-samsung-mobile-processor) (high, CVSS 7.5, published 6 Apr 2026)
- [CVE-2025-57835: An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080…](https://junglewise.ai/threats/cve-2025-57835-an-issue-was-discovered-in-rrc-in-samsung-mobile-processor) (high, CVSS 7.5, published 6 Apr 2026)
- [CVE-2025-62817: Samsung Exynos Mobile Processor NULL pointer dereference in NPU](https://junglewise.ai/threats/cve-2025-62817-samsung-exynos-mobile-processor-null-pointer-dereference-in-npu) (high, CVSS 7.5, published 3 Mar 2026)
- [CVE-2025-52517: An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480…](https://junglewise.ai/threats/cve-2025-52517-an-issue-was-discovered-in-the-camera-in-samsung-mobile-processor) (medium, CVSS 5.9, published 5 Jan 2026)
- [CVE-2025-52516: An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480…](https://junglewise.ai/threats/cve-2025-52516-an-issue-was-discovered-in-the-camera-in-samsung-mobile-processor) (medium, CVSS 6.2, published 5 Jan 2026)
- [CVE-2025-52515: An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480…](https://junglewise.ai/threats/cve-2025-52515-an-issue-was-discovered-in-the-camera-in-samsung-mobile-processor) (medium, CVSS 5.1, published 5 Jan 2026)
- [CVE-2025-52519: An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480…](https://junglewise.ai/threats/cve-2025-52519-an-issue-was-discovered-in-the-camera-in-samsung-mobile-processor) (high, CVSS 7.1, published 5 Jan 2026)

## Most severe Samsung Exynos 2500 vulnerabilities

- [CVE-2025-54328: Samsung Exynos stack buffer overflow in SMS RP-DATA parsing](https://junglewise.ai/threats/cve-2025-54328-samsung-exynos-stack-buffer-overflow-in-sms-rp-data-parsing) (critical, CVSS 10, published 6 Apr 2026)
- [CVE-2025-62818: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100…](https://junglewise.ai/threats/cve-2025-62818-an-issue-was-discovered-in-samsung-mobile-processor-wearable) (critical, CVSS 9.8, published 7 Apr 2026)
- [CVE-2025-58349: Samsung Exynos Modem denial of service in L2 component](https://junglewise.ai/threats/cve-2025-58349-samsung-exynos-modem-denial-of-service-in-l2-component) (critical, CVSS 9.1, published 6 Apr 2026)
- [CVE-2026-23789: Samsung Exynos MFC double-free in encoder driver](https://junglewise.ai/threats/cve-2026-23789-samsung-exynos-mfc-double-free-in-encoder-driver) (high, CVSS 7.8, published 14 Sep 2026)
- [CVE-2025-57834: Samsung Exynos Processors and Modems denial of service via improper input validation](https://junglewise.ai/threats/cve-2025-57834-samsung-exynos-processors-and-modems-denial-of-service-via) (high, CVSS 7.5, published 6 Apr 2026)
- [CVE-2025-62817: Samsung Exynos Mobile Processor NULL pointer dereference in NPU](https://junglewise.ai/threats/cve-2025-62817-samsung-exynos-mobile-processor-null-pointer-dereference-in-npu) (high, CVSS 7.5, published 3 Mar 2026)
- [CVE-2025-54324: Samsung Exynos Modem denial of service in NAS layer](https://junglewise.ai/threats/cve-2025-54324-samsung-exynos-modem-denial-of-service-in-nas-layer) (high, CVSS 7.5, published 6 Apr 2026)
- [CVE-2025-59440: An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080…](https://junglewise.ai/threats/cve-2025-59440-an-issue-was-discovered-in-usim-in-samsung-mobile-processor) (high, CVSS 7.5, published 6 Apr 2026)
- [CVE-2025-57835: An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080…](https://junglewise.ai/threats/cve-2025-57835-an-issue-was-discovered-in-rrc-in-samsung-mobile-processor) (high, CVSS 7.5, published 6 Apr 2026)
- [CVE-2026-33963: Samsung Exynos camera driver stack buffer overflow](https://junglewise.ai/threats/cve-2026-33963-samsung-exynos-camera-driver-stack-buffer-overflow) (high, CVSS 7.5, published 14 Sep 2026)

## Vulnerabilities per week

Nothing in the last four weeks, down from 13 vulnerabilities in the four before.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 13 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Samsung technologies

- [Samsung Exynos 1380](https://junglewise.ai/threats/technologies/exynos-1380): 37 vulnerabilities
- [Samsung Exynos 1480](https://junglewise.ai/threats/technologies/exynos-1480): 37 vulnerabilities
- [Samsung Exynos 1580](https://junglewise.ai/threats/technologies/exynos-1580): 37 vulnerabilities
- [Samsung Exynos 2400](https://junglewise.ai/threats/technologies/exynos-2400): 33 vulnerabilities
- [Samsung Exynos 1330](https://junglewise.ai/threats/technologies/exynos-1330): 30 vulnerabilities
- [Samsung Escargot](https://junglewise.ai/threats/technologies/escargot): 28 vulnerabilities
- [Samsung Exynos 1280](https://junglewise.ai/threats/technologies/exynos-1280): 25 vulnerabilities
- [Samsung Exynos 2200](https://junglewise.ai/threats/technologies/exynos-2200): 20 vulnerabilities
- [Samsung Exynos W920](https://junglewise.ai/threats/technologies/exynos-w920): 19 vulnerabilities
- [Samsung Exynos 850](https://junglewise.ai/threats/technologies/exynos-850): 18 vulnerabilities
- [Samsung Exynos W930](https://junglewise.ai/threats/technologies/exynos-w930): 18 vulnerabilities
- [Samsung Exynos W1000](https://junglewise.ai/threats/technologies/exynos-w1000): 17 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Samsung Exynos 2500 vulnerabilities", https://junglewise.ai/threats/technologies/exynos-2500, 10 November 2026.
