An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.
CVE-2025-54334
CVSS base score
7.5 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-476
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
samsung exynos 1280 firmware
samsung exynos 1380 firmware
samsung exynos 1480 firmware
samsung exynos 1580 firmware
samsung exynos 2200 firmware
samsung exynos 2400 firmware
samsung exynos 2500 firmware
References
- semiconductor.samsung.com Vendor Advisory
- semiconductor.samsung.com Vendor Advisory