Cpe:2.3:o:samsung:exynos_2500_firmware:-:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3osamsungexynos_2500_firmware-/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 19:23:59 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSamsung Exynos 980 Firmware: SMS Parser Stack Buffer Overflow (CVE-2025-54328)https://feed.craftedsignal.io/briefs/2026-10-samsung-exynos-sms-overflow/Wed, 28 Oct 2026 19:23:59 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-samsung-exynos-sms-overflow/A stack-based buffer overflow exists in the Samsung Exynos 980 firmware's SMS RP-DATA parser, enabling potential zero-click remote code execution on the baseband. A conceptual proof-of-concept (PoC) exploit has been published.<p>CVE-2025-54328 is a stack-based buffer overflow in the SMS RP-DATA parser of Samsung Exynos 980 firmware. The vulnerability is reported as a zero-click, remote code execution (RCE) flaw affecting the baseband. A conceptual PoC has been published that generates a raw RP-DATA message with an oversized TPDU payload intended to trigger the overflow. The PoC documentation notes that successful exploitation requires target-specific memory layout and firmware gadget addresses.</p> criticaladvisory