CVE-2025-26780: Samsung Exynos 2400 Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in L2 in Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400. The lack of a length check leads to a Denial of Service via a malformed PDCP packet.

Affected products

• Samsung Exynos 2400 Firmware: affected versions not specified
• Samsung Modem 5400 Firmware: affected versions not specified

Published 2025-07-07. Last modified 2026-06-17.