BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-07

Assigner: MITRE

Description

An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-11-07

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-52910

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	exynos_1280_firmware	*
samsung	exynos_1280	*
samsung	exynos_1330_firmware	*
samsung	exynos_1330	*
samsung	exynos_1380_firmware	*
samsung	exynos_1380	*
samsung	exynos_1480_firmware	*
samsung	exynos_1480	*
samsung	exynos_2200_firmware	*
samsung	exynos_2200	*
samsung	exynos_2400_firmware	*
samsung	exynos_2400	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Impact Analysis

This vulnerability can lead to privilege escalation, meaning an attacker could gain higher-level access or control over the affected device than intended, potentially compromising device security and user data.

Executive Summary

This vulnerability is a Use-After-Free issue found in the GPU of Samsung Mobile and Wearable Processors (Exynos 1280, 2200, 1330, 1380, 1480, 2400). A Use-After-Free occurs when a program continues to use memory after it has been freed, which can lead to unexpected behavior or exploitation.

Hi! I’m here to help you understand CVE-2025-52910. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70