BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-07

Assigner: MITRE

Description

An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-11-07

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-54334

EUVD

EUVD-2025-37842

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	exynos_1280_firmware	*
samsung	exynos_1280	*
samsung	exynos_1380_firmware	*
samsung	exynos_1380	*
samsung	exynos_1480_firmware	*
samsung	exynos_1480	*
samsung	exynos_1580_firmware	*
samsung	exynos_1580	*
samsung	exynos_2200_firmware	*
samsung	exynos_2200	*
samsung	exynos_2400_firmware	*
samsung	exynos_2400	*
samsung	exynos_2500_firmware	*
samsung	exynos_2500	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a NULL Pointer Dereference in the NPU driver of Samsung Mobile Processor Exynos models (1280, 2200, 1380, 1480, 2400, 1580, 2500). It occurs in the __npu_vertex_bootup function when the hdev pointer is dereferenced while being NULL, which can cause the system or driver to crash or behave unexpectedly.

Impact Analysis

The impact of this vulnerability could be a denial of service condition due to a system or driver crash caused by the NULL Pointer Dereference. This may lead to instability or unavailability of the affected device's NPU functionality.

Hi! I’m here to help you understand CVE-2025-54334. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70