CVE-2025-54334
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-07

Assigner: MITRE

Description
An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-04
Last Modified
2025-11-07
Generated
2026-06-16
AI Q&A
2025-11-04
EPSS Evaluated
2026-06-15
NVD
CVE-2025-54334
EUVD
EUVD-2025-37842
Affected Vendors & Products
Showing 14 associated CPEs
Vendor Product Version / Range
samsung exynos_1280_firmware *
samsung exynos_1280 *
samsung exynos_1380_firmware *
samsung exynos_1380 *
samsung exynos_1480_firmware *
samsung exynos_1480 *
samsung exynos_1580_firmware *
samsung exynos_1580 *
samsung exynos_2200_firmware *
samsung exynos_2200 *
samsung exynos_2400_firmware *
samsung exynos_2400 *
samsung exynos_2500_firmware *
samsung exynos_2500 *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a NULL Pointer Dereference in the NPU driver of Samsung Mobile Processor Exynos models (1280, 2200, 1380, 1480, 2400, 1580, 2500). It occurs in the __npu_vertex_bootup function when the hdev pointer is dereferenced while being NULL, which can cause the system or driver to crash or behave unexpectedly.

Impact Analysis

The impact of this vulnerability could be a denial of service condition due to a system or driver crash caused by the NULL Pointer Dereference. This may lead to instability or unavailability of the affected device's NPU functionality.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-54334. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart