CVE-2025-58346 in Mobile Processor
Summary
by MITRE • 02/03/2026
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/send_addts write operation, leading to kernel memory exhaustion.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 02/10/2026
This vulnerability exists within the Wi-Fi driver component of Samsung's Exynos mobile and wearable processors, affecting multiple generations including the 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 chipsets. The flaw manifests as an unbounded memory allocation condition that occurs during a specific write operation to the /proc/driver/unifi0/send_addts interface. This represents a critical security weakness that directly impacts the kernel's memory management system and can be exploited by malicious actors to cause system instability or complete denial of service.
The technical implementation of this vulnerability stems from inadequate input validation within the driver's handling of buffer operations. When a large buffer is written to the specified proc filesystem entry, the system allocates memory without proper bounds checking or size limitations. This uncontrolled memory allocation can quickly exhaust available kernel memory resources, leading to system crashes, memory corruption, or complete system hang conditions. The vulnerability specifically targets the wireless networking subsystem and leverages the proc filesystem interface to trigger the memory exhaustion attack.
From an operational impact perspective, this vulnerability poses significant risks to Samsung mobile devices and wearable products running affected Exynos processors. The attack vector requires minimal privileges and can be executed through standard user-space applications that can write to the proc filesystem. Once exploited, the vulnerability can cause immediate system instability, forcing users to reboot devices manually or potentially leading to complete system lockups. This affects not only individual user experience but also enterprise deployments where device reliability is critical, particularly in industrial or medical applications.
The vulnerability maps directly to CWE-122, which describes "Heap-based Buffer Overflow" and aligns with ATT&CK technique T1059.003 for command and scripting interpreter usage. The unbounded memory allocation creates a classic heap overflow condition that can be leveraged for privilege escalation or system compromise. Security researchers should monitor for potential exploitation patterns targeting the /proc/driver/unifi0/send_addts interface, as this represents a persistent attack surface that could be weaponized by threat actors seeking to disrupt mobile device operations. The vulnerability demonstrates the importance of proper input validation and memory management in kernel drivers, particularly those handling wireless networking protocols.
Mitigation strategies should include immediate firmware updates from Samsung addressing the driver implementation, implementation of kernel memory limits through security modules like grsecurity or PaX, and monitoring of proc filesystem access patterns for suspicious write operations. System administrators should also consider implementing network segmentation to limit exposure and establish baseline monitoring for memory exhaustion patterns. Additionally, the vulnerability underscores the need for comprehensive security testing of kernel modules and driver components, particularly those handling wireless networking protocols, to prevent similar issues in future implementations.