Samsung Exynos 2500 Firmware vulnerabilities

21 CVEs affecting Samsung Exynos 2500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-62818, published 2026-04-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-54328, published 2026-04-06. Critical severity, CVSS 10.0. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000,…
CVE-2025-62818, published 2026-04-07. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem…
CVE-2025-54329, published 2025-11-04. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123,…
CVE-2025-54334, published 2025-11-04. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.
CVE-2025-52513, published 2025-11-04. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in an out-of-bounds write, leading to a denial of service.
CVE-2025-52512, published 2025-11-04. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in out-of-bounds memory access, leading to a denial of service.
CVE-2025-57834, published 2026-04-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W920, W930, W1000,…
CVE-2025-54325, published 2025-11-04. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000. A race condition in the VTS driver results…
CVE-2025-58349, published 2026-04-06. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000,…
CVE-2025-62817, published 2026-03-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_hdr_buf in __pilot_parsing_ncp() causes a denial of…

Latest

CVE-2025-54324, published 2026-04-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000,…
CVE-2025-59440, published 2026-04-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000,…
CVE-2025-57835, published 2026-04-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000,…
CVE-2025-62816, published 2026-03-03. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. Unvalidated VS4L_VERTEXIOC_BOOTUP input leads to a denial of service.
CVE-2025-62815, published 2026-03-03. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of npu_proto_drv.ast.thread_ref in set_cpu_affinity() causes a denial of…