CVE-2025-54327
Essential information
- Published
- 04/11/2025 20:17
- Modified
- 07/11/2025 12:59
- Author
- —
- Creator
- —
- CVSS
- 6.5 MEDIUM (v3.1)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N—
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- NETWORK
- Attack complexity
- LOW
- Privileges required
- NONE
- User interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality impact
- LOW
- Integrity impact
- LOW
- Availability impact
- NONE
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Attack requirements
- —
- Privileges required
- —
- User interaction
- —
- Confidentiality (V)
- —
- Confidentiality (S)
- —
- Integrity (V)
- —
- Integrity (S)
- —
- Availability (V)
- —
- Availability (S)
- —
- Exploit maturity
- —
Description
An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000. Improper input validation in the VTS driver leads to an arbitrary write.
NVD status
- Status
- Analyzed — CVE has had analysis completed and all data associations made.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| samsung / exynos 1280 firmware | cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:* |
| samsung / exynos 1280 | cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:* |
| samsung / exynos 1380 firmware | cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:* |
| samsung / exynos 1380 | cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:* |
| samsung / exynos 2200 firmware | cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:* |
| samsung / exynos 2200 | cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:* |