An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.
References
| Link | Resource |
|---|---|
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/ | Vendor Advisory |
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54331/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Nov 2025, 12:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory | |
| References | () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54331/ - Vendor Advisory | |
| First Time |
Samsung exynos 1380
Samsung Samsung exynos 1380 Firmware |
|
| CPE | cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:exynos_1380_firmware:*:*:*:*:*:*:*:* |
05 Nov 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function. |
04 Nov 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-822 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
04 Nov 2025, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-04 17:16
Updated : 2025-11-07 12:56
NVD link : CVE-2025-54331
Mitre link : CVE-2025-54331
CVE.ORG link : CVE-2025-54331
JSON object : View
Products Affected
samsung
- exynos_1380_firmware
- exynos_1380
CWE
CWE-822
Untrusted Pointer Dereference