BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-07

Assigner: MITRE

Description

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the get_vs4l_profiler_node function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-11-07

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-54333

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	exynos_1380_firmware	to 2025-07 (inc)
samsung	exynos_1380	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-763	The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.

Attack-Flow Graph

Executive Summary

This vulnerability is an invalid pointer dereference issue in the get_vs4l_profiler_node function within the NPU component of Samsung Mobile Processor Exynos devices. It occurs when the software attempts to access memory through a pointer that is not valid, which can lead to crashes or unexpected behavior.

Impact Analysis

The impact of this vulnerability could include application or system crashes due to the invalid pointer dereference, potentially leading to denial of service or instability on affected Samsung Exynos devices.

Hi! I’m here to help you understand CVE-2025-54333. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70