CVE-2025-62815

Medium
|5.5
No Exploit

Plain English Summary

AI-powered analysis for quick understanding

This vulnerability allows an attacker to crash devices using the Exynos 1380 processor, leading to a denial of service where the device becomes unresponsive. It occurs when the system tries to manage CPU resources but encounters a programming error, which can happen under certain conditions during operation.

Technical Description

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of npu_proto_drv.ast.thread_ref in set_cpu_affinity() causes a denial of service.

CVSS Vector Analysis

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
Confidentiality ImpactNone
Integrity ImpactNone
Availability ImpactHigh
ScopeUnchanged

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploit Resources

Search for proof-of-concept code and exploit modules

Official References

Est. Bounty
$759($500-$1K)
Vendor Response
Grade APatched in 1 day

Quick Information

Published

Mar 3, 2026

about 1 month ago

Last Modified

Mar 4, 2026

about 1 month ago

Vendor

samsung

Product

exynos 1380 firmware