An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_hdr_buf in __pilot_parsing_ncp() causes a denial of service.
References
| Link | Resource |
|---|---|
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/ | Vendor Advisory |
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-62817/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
History
04 Mar 2026, 21:27
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| References | () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory | |
| References | () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-62817/ - Vendor Advisory | |
| CPE | cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:exynos_2500_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:exynos_1580_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:exynos_1580:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:exynos_2500:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:* |
|
| First Time |
Samsung exynos 1480
Samsung exynos 1380 Firmware Samsung exynos 1480 Firmware Samsung Samsung exynos 1280 Samsung exynos 1580 Firmware Samsung exynos 2400 Firmware Samsung exynos 1280 Firmware Samsung exynos 1580 Samsung exynos 2500 Samsung exynos 2200 Firmware Samsung exynos 2200 Samsung exynos 1380 Samsung exynos 2500 Firmware Samsung exynos 2400 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
03 Mar 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-03 17:16
Updated : 2026-03-04 21:27
NVD link : CVE-2025-62817
Mitre link : CVE-2025-62817
CVE.ORG link : CVE-2025-62817
JSON object : View
Products Affected
samsung
- exynos_1480
- exynos_2400
- exynos_1380_firmware
- exynos_1580
- exynos_1480_firmware
- exynos_2200_firmware
- exynos_1580_firmware
- exynos_1280_firmware
- exynos_2500
- exynos_2500_firmware
- exynos_2400_firmware
- exynos_1380
- exynos_1280
- exynos_2200
CWE
CWE-476
NULL Pointer Dereference