CVE-2025-54330

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Nov 4, 2025

CISA due date

—

The record

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read of q->bufs[] in the __is_done_for_me function.

Affected packages

Ecosystem	Package	Introduced	Fixed