CVE-2025-48025 Missing authorization in n/a
Improper access control in Samsung Exynos processors allows attackers to read sensitive log files, potentially exposing private data.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-48025?
CVE-2025-48025 is a medium-severity missing authorization vulnerability in Samsung Exynos 1280 Firmware, published on 20 Oct 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an improper access control vulnerability related to a log file.
Weakness: CWE-284
Which versions are affected by CVE-2025-48025?
It affects 10 products.
Products include Samsung Exynos 1280 Firmware, Samsung Exynos 1330 Firmware, Samsung Exynos 1380 Firmware, Samsung Exynos 1480 Firmware, Samsung Exynos 1580 Firmware, Samsung Exynos 850 Firmware and 4 more.
How do I fix CVE-2025-48025?
No fix has been published for CVE-2025-48025 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-48025 being exploited?
There is no known exploitation of CVE-2025-48025 in the wild and no public exploit code.
Other vulnerabilities in Samsung Exynos 1280 Firmware
Sources
Also known as GHSA-mp59-2529-g767.