CVE-2025-52908 Memory corruption in n/a
A buffer overflow in the Exynos Wi-Fi driver allows attackers to execute arbitrary code or escalate privileges via crafted ioctl messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-52908?
CVE-2025-52908 is a critical memory corruption vulnerability in Samsung Exynos 1280 Firmware, published on 7 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 1 of 2.
Weakness: CWE-120
Which versions are affected by CVE-2025-52908?
It affects 10 products.
Products include Samsung Exynos 1280 Firmware, Samsung Exynos 1330 Firmware, Samsung Exynos 1380 Firmware, Samsung Exynos 1480 Firmware, Samsung Exynos 1580 Firmware, Samsung Exynos 850 Firmware and 4 more.
How do I fix CVE-2025-52908?
No fix has been published for CVE-2025-52908 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-52908 being exploited?
There is no known exploitation of CVE-2025-52908 in the wild and no public exploit code.
Other vulnerabilities in Samsung Exynos 1280 Firmware
Sources
Also known as GHSA-326f-rc6r-57wf.