PT-2026-22749 · Samsung · Exynos 1580+4

Published 2026-03-03 · Updated 2026-03-04 · CVE-2025-62815

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1380 Samsung Mobile Processor Exynos 1480 Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 1580 Samsung Mobile Processor Exynos 2500

Description A flaw exists in Samsung Mobile Processors Exynos 1380, 1480, 2400, 1580, and 2500 where a NULL pointer dereference within the set cpu affinity() function, specifically related to npu proto drv.ast.thread ref, can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-62815

Affected Products

Exynos 1380

Exynos 1480

Exynos 1580

Exynos 2400

Exynos 2500

References · 6

• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62815 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-62815 · Vendor Advisory
• https://t.me/cveNotify/154155 · Telegram Post
• https://twitter.com/CVEnew/status/2028877547942154396 · Twitter Post
• https://t.me/cveNotify/154150 · Telegram Post