CVE-2025-66365
Quick assessment
Affected
Samsung Semiconductor Exynos 1080
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SIP 数据包处理不当导致基带系统崩溃。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-66365
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect handling of SIP packets leads to baseband crashes
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
对因果或异常条件的不恰当检查
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 | 0 ~ October 2026 | - |
|
| Samsung Semiconductor | Exynos 9110 | 0 ~ October 2026 | - |
|
| Samsung Semiconductor | Exynos Modem 5123 | 0 ~ October 2026 | - |
|
| Samsung Semiconductor | Exynos Modem 5300 | 0 ~ October 2026 | - |
|
| Samsung Semiconductor | Exynos Modem 5400 | 0 ~ October 2026 | - |
|
II. Public POCs for CVE-2025-66365
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-66365
请登录查看更多情报信息。
Same Patch Batch · Samsung Semiconductor · 2026-11-05 · 35 CVEs total
| CVE-2026-68993 | NPU 驱动 940 版本因指针管理不当引发双重释放漏洞 | |
| CVE-2026-69044 | 三星 GPU 驱动命令提交引用计数漏洞致内存破坏 | |
| CVE-2026-69002 | 三星框架服务因缺少权限检查导致授权漏洞 | |
| CVE-2026-69068 | GNSS固件加载器长度校验不足致内核内存损坏 | |
| CVE-2026-69025 | Exynos NPU 驱动 ioctl 越界写入致拒绝服务 | |
| CVE-2026-69005 | NPU 驱动参数处理整数溢出漏洞 | |
| CVE-2026-69043 | 三星 Exynos GPU 驱动缓冲区创建关闭同步漏洞 | |
| CVE-2026-69050 | 设备驱动程序因资源状态追踪不当导致越界内存访问 | |
| CVE-2026-68990 | 三星 Exynos H-Arx DRM 插件输入验证漏洞 | |
| CVE-2026-69006 | GNSS 固件加载器长度验证不足致内核内存损坏 | |
| CVE-2026-68991 | 三星 Exynos ENN HAL 输入验证漏洞致拒绝服务 | |
| CVE-2026-68985 | 三星 Exynos NPU 驱动越界写入导致拒绝服务 | |
| CVE-2026-68984 | 三星Exynos NPU内核驱动整数溢出漏洞 | |
| CVE-2026-68994 | NPU 驱动双释放漏洞 (941) | |
| CVE-2025-66367 | NAS DLTransport 消息处理不当致基带崩溃 | |
| CVE-2025-66368 | SDP 载荷处理不当导致拒绝服务漏洞 | |
| CVE-2025-66366 | 5G 基带未认证 RRC Setup 消息处理漏洞 | |
| CVE-2026-48176 | 某软件某版本因消息验证不当致内存破坏漏洞 | |
| CVE-2026-35495 | IMS 堆栈 SIP 包处理不当引发访问控制漏洞 | |
| CVE-2026-35494 | 基带 NAS 包处理内存损坏致拒绝服务漏洞 |
Showing top 20 of 35 CVEs. View all on vendor page → →