CVE-2025-54331: Untrusted Pointer Dereference
Source CVE Database V5
Not known to be exploited · CVSS 5.3 Medium.
Data as of 26 Oct 2026, 09:15 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 24% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitation evidence
Disclosed: evidence found.
CVE published 4 Nov 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
1. Monitor Samsung's official security advisories and apply firmware or software patches for the Exynos 1380 NPU as soon as they become available. 2. Implement network segmentation and restrict network access to vulnerable devices, especially on corporate Wi-Fi and VPNs, to reduce exposure to remote exploitation. 3. Employ mobile device management (MDM) solutions to enforce security policies, monitor device health, and remotely isolate or remediate affected devices. 4. Educate users about the importance of installing updates promptly and recognizing unusual device behavior such as unexpected crashes or reboots. 5. For critical environments, consider temporarily limiting the use of Exynos 1380-based devices until patches are deployed. 6. Conduct regular security assessments and vulnerability scans on mobile endpoints to detect potential exploitation attempts. 7. Collaborate with mobile carriers and device vendors to ensure timely communication and coordinated response to emerging threats related to this vulnerability.
Description
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.