CVE-2025-54328 — Samsung Exynos SMS RP-DATA Stack Buffer Overflow

Conceptual PoC for CVE-2025-54328, a CVSS 10.0 Critical stack-based buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser.

Article

Full write-up: Samsung Exynos SMS Stack Overflow: CVE-2025-54328 — Critical Zero-Click Baseband RCE

PoC

python3 poc_cve_2025_54328.py +4412345678

Generates a raw RP-DATA message with an oversized TPDU payload that would trigger a stack-based buffer overflow in the Shannon baseband firmware's SMS parser.

This is a conceptual PoC. It will not exploit a production device without the specific memory layout and firmware gadget addresses for the target baseband version.

Requirements

• Python 3.6+

Delivery

Injecting the generated message requires one of:

• A fake BTS (OpenBTS / srsRAN) + SDR (USRP / HackRF)
• An SMS gateway with raw PDU mode access
• Direct memory injection via JTAG / UART on the baseband

Disclaimer

This code is provided for educational and authorized security research only. Unauthorized access to computer systems is illegal.