CVE-2025-54331

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Nov 4, 2025

CISA due date

—

The record

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.

Affected packages

Ecosystem	Package	Introduced	Fixed