PT-2025-45024 · Samsung · Exynos

Published 2025-11-04 · Updated 2025-11-06 · CVE-2025-54333

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions through July 2025

Description An issue exists in the NPU within Samsung Mobile Processor Exynos. Specifically, an invalid pointer dereference occurs within the get vs4l profiler node function when handling a node.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-763

Related Identifiers

CVE-2025-54333

Affected Products

Exynos

References · 7

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54333 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54333 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54333 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://t.me/CVEtracker/36537 · Telegram Post
• https://t.me/cveNotify/141861 · Telegram Post
• https://t.me/cveNotify/141989 · Telegram Post