CVE-2025-54327

MediumCVSS 6.5

Published: 04/11/2025(UTC)Updated: 05/11/2026(UTC)Translated: 05/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

Improper input validation in the VTS driver of Samsung Exynos 1280, 2200, 1380, W920, W930, and W1000 processors leads to an arbitrary write.

Risk Assessment

This may allow an attacker to corrupt memory or perform unauthorized operations, potentially destabilizing the device or escalating privileges.

Recommendation

Apply the vendor firmware update that fixes the VTS driver as soon as possible.

Other vulnerabilities in Samsung Exynos VTS driver

CVE-2025-54325Medium
In the VTS driver of Samsung Exynos processors (1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000) a race condition results in an out-of-bounds read and information leak.

Original NVD description (English source)

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000. Improper input validation in the VTS driver leads to an arbitrary write.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS