PT-2025-45028 · Samsung · Exynos 2500+6

Published 2025-11-04 · Updated 2025-11-07 · CVE-2025-54334

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1280 Samsung Mobile Processor Exynos 2200 Samsung Mobile Processor Exynos 1380 Samsung Mobile Processor Exynos 1480 Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 1580 Samsung Mobile Processor Exynos 2500

Description An issue exists in the NPU driver. A NULL Pointer Dereference of hdev occurs within the npu vertex bootup function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-54334

Affected Products

Exynos 1280

Exynos 1380

Exynos 1480

Exynos 1580

Exynos 2200

Exynos 2400

Exynos 2500

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-54334 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54334 · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://t.me/CVEtracker/36542 · Telegram Post
• https://t.me/cveNotify/142084 · Telegram Post