CVE-2025-54331

—

CVSS 3.1

5.3 medium

EPSS

<1%p22

Published

Nov 4, 2025 (Nov 4, 2025)

Modified

Jun 17, 2026

Description

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.

Vendors: samsung
Products: exynos 1380 firmware
Weakness: CWE-822
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.