CVE-2025-54325

MediumCVSS 5.3

Published: 04/11/2025(UTC)Updated: 05/11/2026(UTC)Translated: 05/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

In the VTS driver of Samsung Exynos processors (1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000) a race condition results in an out-of-bounds read and information leak.

Risk Assessment

The data leak may expose confidential kernel memory information that could be used for further attacks against the device.

Recommendation

Deploy vendor firmware updates for the listed Exynos models, prioritizing devices that process sensitive data.

Other vulnerabilities in Samsung Exynos VTS driver

CVE-2025-54327Medium
Improper input validation in the VTS driver of Samsung Exynos 1280, 2200, 1380, W920, W930, and W1000 processors leads to an arbitrary write.

Original NVD description (English source)

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000. A race condition in the VTS driver results in an out-of-bounds read, leading to an information leak.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS