CVE-2025-62814

High
|7.5
No Exploit

Plain English Summary

AI-powered analysis for quick understanding

This vulnerability allows an attacker to crash devices using the Samsung Exynos 1280 processor, leading to a denial of service where the device becomes unresponsive. It occurs when the firmware tries to access a part of memory that isn't properly set up, which can happen under certain conditions during firmware loading.

Technical Description

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400. A NULL pointer dereference of ft_handle in load_fw_utc_vector() causes a denial of service.

CVSS Vector Analysis

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
Confidentiality ImpactNone
Integrity ImpactNone
Availability ImpactHigh
ScopeUnchanged

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Resources

Search for proof-of-concept code and exploit modules

Official References

Est. Bounty
$2,053($1K-$5K)
Vendor Response
Grade APatched in 1 day

Quick Information

Published

Mar 3, 2026

about 1 month ago

Last Modified

Mar 4, 2026

about 1 month ago

Vendor

samsung

Product

exynos 1280 firmware