This vulnerability involves an out-of-bounds write in Samsung Mobile Processor, Wearable Processor, and Modem Exynos series (including models 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, and Modems 5123, 5300, 5400). The issue is caused by a mismatch between the TP-UDHI and UDL values when processing an SMS TP-UD packet, leading to memory corruption (CWE-787). The vulnerability is remotely exploitable without privileges or user interaction, with a critical CVSS 3.1 base score of 9.8.

Successful exploitation could allow an attacker to execute arbitrary code, cause denial of service, or compromise the confidentiality and integrity of the affected device. The vulnerability affects a wide range of Samsung Exynos processors and modems, potentially impacting many devices using these components. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation level has been published, users and administrators should monitor Samsung's security advisories for updates. Until a patch is available, limiting exposure to untrusted SMS messages may reduce risk.