CVE-2025-62814

Received Received - Intake

NULL Pointer Dereference in Samsung Exynos Causes DoS

Publication date: 2026-03-03

Last updated on: 2026-03-04

Assigner: MITRE

Description

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400. A NULL pointer dereference of ft_handle in load_fw_utc_vector() causes a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-03

Last Modified

2026-03-04

Generated

2026-07-06

AI Q&A

2026-03-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-62814

EUVD

EUVD-2025-208234

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	exynos_1280_firmware	*
samsung	exynos_1380_firmware	*
samsung	exynos_1480_firmware	*
samsung	exynos_2200_firmware	*
samsung	exynos_2400_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Detection Guidance

There are no specific detection methods or commands provided to identify this vulnerability on your network or system.

Mitigation Strategies

No mitigation steps or patches are detailed in the provided information for this vulnerability.

Executive Summary

[{'type': 'paragraph', 'content': 'CVE-2025-62814 is a medium-severity vulnerability affecting Samsung Exynos processors, specifically models 1280, 1380, 1480, 2200, and 2400.'}, {'type': 'paragraph', 'content': 'The issue arises from a null pointer dereference of the variable "ft_handle" within the function load_fw_utc_vector(), which leads to a denial of service (DoS) condition.'}, {'type': 'paragraph', 'content': 'This vulnerability impacts the Neural Processing Unit (NPU) component of the affected processors.'}] [1]

Impact Analysis

This vulnerability can cause a denial of service (DoS) condition on devices using the affected Samsung Exynos processors.

A denial of service means that the Neural Processing Unit (NPU) component may become unresponsive or stop functioning properly, potentially affecting device performance or stability.

Compliance Impact

I don't know

Hi! I’m here to help you understand CVE-2025-62814. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70