CVE-2025-54333
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-04
Last updated on: 2025-11-07
Assigner: MITRE
Description
Description
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the get_vs4l_profiler_node function.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | exynos_1380_firmware | to 2025-07 (inc) |
| samsung | exynos_1380 | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-763 | The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an invalid pointer dereference issue in the get_vs4l_profiler_node function within the NPU component of Samsung Mobile Processor Exynos devices. It occurs when the software attempts to access memory through a pointer that is not valid, which can lead to crashes or unexpected behavior.
How can this vulnerability impact me? :
The impact of this vulnerability could include application or system crashes due to the invalid pointer dereference, potentially leading to denial of service or instability on affected Samsung Exynos devices.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70