CVE-2025-54331

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-54331
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54331/
Configurations

No configuration.

History

05 Nov 2025, 20:15

Type Values Removed Values Added
Summary (en) An issue was discovered in NPU in Samsung Mobile Processor Exynos through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function. (en) An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.

04 Nov 2025, 21:15

Type Values Removed Values Added
CWE CWE-822
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3

04 Nov 2025, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-04 17:16

Updated : 2025-11-06 19:45

NVD link : CVE-2025-54331

Mitre link : CVE-2025-54331

CVE.ORG link : CVE-2025-54331

JSON object : View

Products Affected

No product.

CWE
CWE-822

Untrusted Pointer Dereference