PT-2025-48965 · Samsung · Exynos 2200+1

Published 2025-12-03 · Updated 2025-12-05 · CVE-2025-54326

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1280 and 2200 (affected versions not specified)

Description An issue exists in the Camera component of Samsung Mobile Processors Exynos 1280 and 2200. An unnecessary registration of a hardware IP address within the Camera device driver can cause a NULL pointer dereference, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-54326

Affected Products

Exynos 1280

Exynos 2200

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-54326 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54326 · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1996293145814774247 · Twitter Post
• https://twitter.com/dailycve/status/1997031363309195472 · Twitter Post
• https://twitter.com/CVEnew/status/1996268280797958478 · Twitter Post
• https://t.me/CVEtracker/38763 · Telegram Post