deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-20739
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435340; Issue ID: MSV-4038.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20740
Published: 2025-11-04
Description: In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-367
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20741
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-3958.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20742
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00432680; Issue ID: MSV-3949.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20743
Published: 2025-11-04
Description: In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10136671; Issue ID: MSV-4651.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-416
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20744
Published: 2025-11-04
Description: In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10127160; Issue ID: MSV-4542.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-416
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20745
Published: 2025-11-04
Description: In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10095441; Issue ID: MSV-4294.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-416
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20746
Published: 2025-11-04
Description: In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20747
Published: 2025-11-04
Description: In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20748
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-3950.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20749
Published: 2025-11-04
Description: In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915493; Issue ID: MSV-3800.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-11690
Published: 2025-11-04
Description: An Insecure Direct Object Reference (IDOR) vulnerability exists in the vehicleId parameter, allowing unauthorized access to sensitive information of other users’ vehicles. Exploiting this issue enables an attacker to retrieve data such as GPS coordinates, encryption keys, initialization vectors, model numbers, and fuel statistics belonging to other users, instead of being limited to their own vehicle data. The fix for this vulnerability is a server-side authorization fix.
CVSS Score: 8.5 (HIGH)
CWE: CWE-639
References: https://advisories.ncsc.nl/2025/ncsc-2025-0350.html; https://medium.com/@ilnur.khakimov_86612/how-i-hacked-100-000-motorcycles-including-my-own-666bdb702b7d
CVE: CVE-2025-12045
Published: 2025-11-04
Description: The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category and tag 'name' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/themeisle-companion/trunk/obfx_modules/elementor-extra-widgets/widgets/elementor/posts-grid.php#L1878; https://plugins.trac.wordpress.org/browser/themeisle-companion/trunk/obfx_modules/elementor-extra-widgets/widgets/elementor/posts-grid.php#L1912; https://plugins.trac.wordpress.org/changeset/3388856/
CVE: CVE-2025-12493
Published: 2025-11-04
Description: The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the 'load_template' function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/woolentor-addons/trunk/classes/class.ajax_actions.php#L213; https://plugins.trac.wordpress.org/browser/woolentor-addons/trunk/classes/class.ajax_actions.php#L241; https://plugins.trac.wordpress.org/browser/woolentor-addons/trunk/classes/class.ajax_actions.php#L42
CVE: CVE-2025-41111
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarComentariosByDenuncia.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41112
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros2.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41113
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarDenunciaByPin.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41114
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDocumentosByIdDenunciaUsuario.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-12682
Published: 2025-11-04
Description: The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload arbitrary JavaScript files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/changeset/3384711/; https://www.wordfence.com/threat-intel/vulnerabilities/id/6a050764-0ba6-49a4-bd71-f79e3129fc4c?source=cve
CVE: CVE-2025-12695
Published: 2025-11-04
Description: The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-653
References: https://research.jfrog.com/vulnerabilities/dspy-sandbox-escape-arbitrary-file-read-jfsa-2[PII_REDACTED]52/
CVE: CVE-2025-41335
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'id_sociedad' in '/api/buscarEmpresaById.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41336
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41337
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarSSOParametros.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41338
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarTestigoByIdDenunciaUsuario.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41339
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_sociedad' in '/backend/api/buscarTipoDenuncia.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41340
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_tp_denuncia' and 'id_sociedad' in '/backend/api/buscarTipoDenunciabyId.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41341
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41342
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_user' in '/backend/api/buscarUsuarioId.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41343
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'email' in '/backend/api/users/searchUserByEmail.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41344
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_archivo' in '/backend/api/verArchivo.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-41345
Published: 2025-11-04
Description: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDenunciasById.php'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp
CVE: CVE-2025-12184
Published: 2025-11-04
Description: The MeetingList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.com/plugins/meeting-list; https://www.wordfence.com/threat-intel/vulnerabilities/id/a14b0f3d-7c18-4468-88f7-cc070c4cea4e?source=cve
CVE: CVE-2025-63294
Published: 2025-11-04
Description: WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://codecanyon.net/item/hrm-saas-hr-and-payroll-tool/25982934; https://medium.com/@barrattjack89/cve-2025-63294-insecure-permissions-in-workdo-hrm-saas-hr-and-payroll-8-1-d6bb03c21177; https://workdo.io/hrm-saas-human-resource-management-software/
CVE: CVE-2025-54323
Published: 2025-11-04
Description: An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580. Improper debug printing leads to information leakage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54323/
CVE: CVE-2025-54329
Published: 2025-11-04
Description: An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message (including an SMS message) lacks bounds checking, which can lead to a heap overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54329/
CVE: CVE-2025-54330
Published: 2025-11-04
Description: An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read of q->bufs[] in the __is_done_for_me function.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54330/
CVE: CVE-2025-54331
Published: 2025-11-04
Description: An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-822
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54331/
CVE: CVE-2025-54332
Published: 2025-11-04
Description: An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is a NULL Pointer Dereference of profiler.node in the npu_vertex_profileoff function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54332/
CVE: CVE-2025-54863
Published: 2025-11-04
Description: Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could potentially compromise airport operations. Additionally, attackers could flood the system with false alerts, leading to a denial-of-service condition and significant disruption to airport operations. Unauthorized remote control over aviation weather monitoring and data manipulation could result in incorrect flight planning and hazardous takeoff and landing conditions.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-522
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-04.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-04
CVE: CVE-2025-60925
Published: 2025-11-04
Description: codeshare v1.0.0 was discovered to contain an information leakage vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://gist.github.com/XERXES-OG/8fa5e75604e1d0c908cff3f85251c6b1; https://medium.com/@ashutoshhwork/accessing-full-history-of-codeshare-io-users[PII_REDACTED]30
CVE: CVE-2025-61945
Published: 2025-11-04
Description: Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication. Once inside, the attacker can modify critical weather parameters such as wind shear alerts, inversion depth, and CAPE values, which are essential for accurate weather forecasting and flight safety. This unauthorized access could result in the disabling of vital alerts, causing hazardous conditions for aircraft, and manipulating runway assignments, which could result in mid-air conflicts or runway incursions.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-04.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-04
CVE: CVE-2025-61956
Published: 2025-11-04
Description: Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots. Additionally, manipulated meteorological data could mislead forecasters and ATC, causing inaccurate flight planning.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-04.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-04
CVE: CVE-2025-54325
Published: 2025-11-04
Description: An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000. A race condition in the VTS driver results in an out-of-bounds read, leading to an information leak.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54325/
CVE: CVE-2025-54333
Published: 2025-11-04
Description: An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the get_vs4l_profiler_node function.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-763
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54333/
CVE: CVE-2025-10875
Published: 2025-11-04
Description: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects Mulesoft Anypoint Code Builder: before 1.11.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://help.salesforce.com/s/articleView?id=005228032&type=1
CVE: CVE-2025-12108
Published: 2025-11-04
Description: The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration wizard immediately without a login prompt or credentials check.
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-02
CVE: CVE-2025-52512
Published: 2025-11-04
Description: An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in out-of-bounds memory access, leading to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-52512/