Exynos — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
November 4, 2025
Last Seen
February 18, 2026

Exynos is Samsung's family of mobile system-on-chip platforms powering Galaxy devices, integrating CPU, GPU, modem, and security features.

Overview

Exynos is Samsung's family of mobile system-on-chip platforms powering Galaxy devices, integrating CPU, GPU, modem, and security features. It is a high-value target in cybersecurity due to its prominence in consumer devices and its role in delivering security updates, including patches for vulnerabilities and protection against malware on Galaxy devices.

Related Threat Clusters

  • Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability

    A sophisticated spyware named Landfall targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability in Samsung's image processing library. Discovered by Palo Alto Networks' Unit 42, the malware…

    37 articles · Updated November 12, 2025
  • Samsung's November 2025 Security Update Addresses Multiple Vulnerabilities

    Samsung has released its November 2025 Security Maintenance Release (SMR) for Galaxy devices, addressing a total of 45 vulnerabilities. This update includes fixes for 25 vulnerabilities in the Android operating system…

    4 articles · Updated November 4, 2025
  • Multiple CVEs Affecting SCSI UFS Drivers Published

    Two new CVEs have been published affecting SCSI UFS drivers. CVE-2024-57872, published on January 11, 2025, involves deallocating HBA during the ufshcd_pltfrm_remove() function. CVE-2025-39788, published on September…

    6 articles · Updated February 18, 2026
  • Google Reduces AOSP Source Code Release Cycle to Twice a Year

    Google has announced that it will now release the Android source code for the Android Open Source Project (AOSP) biannually. This change aligns with the trunk-stable model introduced in mid-2025, following a delay in…

    4 articles · Updated January 7, 2026
  • Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability

    Landfall, a sophisticated Android spyware, targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability (CVE-2025-21042) in Samsung's image-processing library. The campaign, uncovered by Palo…

    47 articles · Updated November 10, 2025
  • Samsung Galaxy Watch 8 November 2025 Update Released

    Samsung has begun rolling out the November 2025 update for the Galaxy Watch 8 series, enhancing security and performance. This update, based on One UI 8.0 with Wear OS 6, is currently available in Korea, with plans for…

    54 articles · Updated November 19, 2025
  • Samsung November 2025 Security Update Rollout for Galaxy Devices

    Samsung has initiated the rollout of its November 2025 security update across various Galaxy devices, including flagship models like the Galaxy S25, S24, and S23 series, as well as budget models such as the Galaxy A…

    93 articles · Updated November 26, 2025

Recent Intelligence Reports

  • CVE-2025-39788 scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE — Api.Msrc.Microsoft · February 18, 2026
  • Google makes major change to Android source code schedule — Sammyfans · January 7, 2026
  • 6 Samsung flagships get November 2025 security patch in the US — Sammyfans · November 19, 2025
  • Landfall Spyware's Silent Siege on Samsung Galaxies — Webpronews · November 9, 2025
  • Samsung's November 2025 Security Update Fixes 34 Vulnerabilities — Androidheadlines · November 4, 2025

CVSS v3.1 Breakdown