What is CVE-2025-54327?

CVE-2025-54327 is a medium-severity vulnerability in Samsung Exynos 1280, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2025-11-04.

How severe is CVE-2025-54327?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Improper input validation in Samsung Exynos 1280

CVE-2025-54327

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000. Improper input validation in the VTS driver leads to an arbitrary write.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (10.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Samsung Exynos_1280
Samsung Exynos_1280_firmware
Samsung Exynos_1380
Samsung Exynos_1380_firmware
Samsung Exynos_2200
Samsung Exynos_2200_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (Vendor Advisory)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2025-54327?: CVE-2025-54327 is a medium-severity vulnerability in Samsung Exynos 1280, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2025-11-04.
How severe is CVE-2025-54327?: Medium severity. CVSS v3 base score is 6.5 out of 10.