CVE-2025-49495 Memory corruption in n/a

High 8.4 Published 5 Jan 2026 Updated 5 Jan 2026

A buffer overflow in the Exynos WiFi driver allows attackers to execute arbitrary code via mishandled vendor commands.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-49495?

CVE-2025-49495 is a high-severity memory corruption vulnerability in Samsung Exynos 1380 Firmware, published on 5 Jan 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an NL80211 vendor command leads to a buffer overflow.

Weakness: CWE-120

Which versions are affected by CVE-2025-49495?

It affects 4 products.

Products include Samsung Exynos 1380 Firmware, Samsung Exynos 1480 Firmware, Samsung Exynos 1580 Firmware, Samsung Exynos 2400 Firmware.

How do I fix CVE-2025-49495?

No fix has been published for CVE-2025-49495 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-49495 being exploited?

There is no known exploitation of CVE-2025-49495 in the wild and no public exploit code.

All Samsung Exynos 1380 Firmware vulnerabilities

Sources

Also known as GHSA-3222-mcx9-476q.