CVE-2025-54327

MEDIUM

Samsung Exynos 1280, 1380, 2200, W920, W930, W1000 Firmware - Arbitrary Write via VTS Driver Input Validation

Title source: llm
STIX 2.1

Description

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000. Improper input validation in the VTS driver leads to an arbitrary write.

References (2)

Core 2

Scores

CVSS v3 6.5
EPSS 0.0006
EPSS Percentile 19.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (3)
samsung/exynos_1280_firmware
samsung/exynos_1380_firmware
samsung/exynos_2200_firmware
Published Nov 04, 2025
Tracked Since Feb 18, 2026