CVE-2025-59440 | Samsung Mobile Processor/Wearable Processor/Modem Exynos up to 9110 USIM denial of service
VulDBArchived Apr 06, 2026✓ Full text saved
A vulnerability marked as problematic has been reported in Samsung Mobile Processor, Wearable Processor and Modem Exynos up to 9110 . The affected element is an unknown function of the component USIM . The manipulation leads to denial of service. This vulnerability is referenced as CVE-2025-59440 . The attack needs to be initiated within the local network. No exploit is available.
Full text archived locally
✦ AI Summary· Claude Sonnet
VDB-355626 · CVE-2025-59440 · GCVE-0-2025-59440
SAMSUNG MOBILE PROCESSOR/WEARABLE PROCESSOR/MODEM EXYNOS UP TO 9110 USIM DENIAL OF SERVICE
HISTORYDIFFRELATEJSONXMLCTI
CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score
5.7 $0-$5k 0.47+
Summaryinfo
A vulnerability described as problematic has been identified in Samsung Mobile Processor, Wearable Processor and Modem Exynos up to 9110. The impacted element is an unknown function of the component USIM. The manipulation results in denial of service. This vulnerability is identified as CVE-2025-59440. There is not any exploit available.
Detailsinfo
A vulnerability classified as problematic has been found in Samsung Mobile Processor, Wearable Processor and Modem Exynos up to 9110. Affected is an unknown code block of the component USIM. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. CVE summarizes:
An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.
The advisory is available at semiconductor.samsung.com. This vulnerability is traded as CVE-2025-59440 since 09/16/2025. The technical details are unknown and an exploit is not available.
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Productinfo
Vendor
Samsung
Name
Mobile Processor
Modem Exynos
Wearable Processor
Version
850
980
990
1080
1280
1330
1380
1480
1580
2100
2200
2400
2500
5123
5300
5400
9110
License
commercial
Website
Vendor: https://www.samsung.com/
CPE 2.3info
🔒
🔒
🔒
CPE 2.2info
🔒
🔒
🔒
CVSSv4info
VulDB Vector: 🔒
VulDB Reliability: 🔍
CVSSv3info
VulDB Meta Base Score: 5.7
VulDB Meta Temp Score: 5.7
VulDB Base Score: 5.7
VulDB Temp Score: 5.7
VulDB Vector: 🔒
VulDB Reliability: 🔍
CVSSv2info
Vector Complexity Authentication Confidentiality Integrity Availability
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Exploitinginfo
Class: Denial of service
CWE: CWE-404
CAPEC: 🔒
ATT&CK: 🔒
Physical: No
Local: No
Remote: Partially
Availability: 🔒
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔒
0-Day Unlock Unlock Unlock Unlock
Today Unlock Unlock Unlock Unlock
Threat Intelligenceinfo
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍
Countermeasuresinfo
Recommended: no mitigation known
Status: 🔍
0-Day Time: 🔒
Timelineinfo
09/16/2025 CVE reserved
04/06/2026 +202 days Advisory disclosed
04/06/2026 +0 days VulDB entry created
04/06/2026 +0 days VulDB entry last update
Sourcesinfo
Vendor: samsung.com
Advisory: semiconductor.samsung.com
Status: Confirmed
CVE: CVE-2025-59440 (🔒)
GCVE (CVE): GCVE-0-2025-59440
GCVE (VulDB): GCVE-100-355626
Entryinfo
Created: 04/06/2026 21:21
Changes: 04/06/2026 21:21 (53)
Complete: 🔍
Cache ID: 99:B8E:101
Discussion
No comments yet. Languages: en.
Please log in to comment.
◂ PreviousOverviewNext ▸