CVE-2025-62816
Received Received - Intake

Denial of Service via Unvalidated Input in Samsung Exynos Processors

Vulnerability report for CVE-2025-62816, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-03-03

Last updated on: 2026-03-04

Assigner: MITRE

Description

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. Unvalidated VS4L_VERTEXIOC_BOOTUP input leads to a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-03
Last Modified
2026-03-04
Generated
2026-07-06
AI Q&A
2026-03-03
EPSS Evaluated
2026-07-05
NVD
EUVD

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
samsung exynos_1280_firmware *
samsung exynos_1380_firmware *
samsung exynos_1480_firmware *
samsung exynos_1580_firmware *
samsung exynos_2200_firmware *
samsung exynos_2400_firmware *
samsung exynos_2500_firmware *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-62816 is a medium-severity vulnerability found in the Neural Processing Unit (NPU) component of Samsung Exynos processors, including models 1280, 1380, 1480, 1580, 2200, 2400, and 2500.

The vulnerability occurs because the input to the VS4L_VERTEXIOC_BOOTUP interface is not properly validated, which can cause the system to experience a denial of service (DoS) condition.

Impact Analysis

This vulnerability can impact you by causing a denial of service (DoS) on devices using the affected Samsung Exynos processors. This means that the device or the Neural Processing Unit may become unresponsive or crash when exposed to malicious or malformed input targeting the VS4L_VERTEXIOC_BOOTUP interface.

Compliance Impact

I don't know

Detection Guidance

There are no specific detection methods or commands provided to identify this vulnerability on your network or system.

Mitigation Strategies

No specific mitigation steps or patched versions are provided for this vulnerability at this time.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-62816. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart