CVE-2025-54331: Samsung Exynos 1380 Firmware

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.

Affected products

• Samsung Exynos 1380 Firmware: up to and including 2025-07

Published 2025-11-04. Last modified 2026-06-17.